CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the rtl8723bs driver, which improperly handles out-of-bounds reads when processing Information Element (IE) data from network frames. This flaw could lead to potential memory corruption or exposure of sensitive data, making it critical for developers and system administrators managing Linux-based systems to prioritize patching. Users of affected Linux distributions should ensure they are running updated kernel versions to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() rtw_get_wps_ie() iterates over IE data from network frames without validating that the IE header and payload fit within the remaining buffer before reading them. Specifically: - in_ie[cnt + 1] is read without checking cnt + 1 < in_len - memcmp(&in_ie[cnt + 2], ...) accesses cnt + 2 without bounds check - in_ie[cnt + 1] is used as length without verifying payload fits Add bounds checks at the top of the loop body to break early if fewer than 2 bytes remain for the IE header, or if the declared payload extends past the end of the buffer. Also require at least 4 bytes of payload before comparing the WPS OUI.