Out-of-bounds read in Linux kernel - CVE-2026-90016

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information and cause a denial of service.

The vulnerability exists due to an out-of-bounds read in rtw_restruct_wmm_ie() in the rtl8723bs driver when processing attacker-influenced information element buffers from association or scan data. A remote attacker can provide crafted association or scan data to disclose sensitive information and cause a denial of service.

Affected software

How to mitigate CVE-2026-90016

External References

• https://git.kernel.org/stable/c/28a289beaf226b30b1e6e7d7b1a2946fe2d6e852
• https://git.kernel.org/stable/c/4420cc71841b50e31a7868ef7acb011c0e08d294
• https://git.kernel.org/stable/c/fd19b8895f8a91087e8a62f1e27b128025dabb95

Related Security Bulletins

• Out-of-bounds read in Linux kernel rtl8723bs core driver