SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74648

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the rtl8723bs driver, which improperly validates monitor transmit frame lengths, potentially leading to out-of-bounds reads or insufficient data for Ethernet address writes. This flaw could be exploited by attackers to manipulate network traffic or cause system instability. Organizations using affected Linux systems, particularly those relying on wireless networking, should prioritize patching to mitigate potential risks.

CVE
CVE-2026-74648
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtw_cfg80211_monitor_if_xmit_entry() removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains. The data path also pulls the calculated 802.11, QoS and SNAP header span before confirming that the skb contains it. A truncated frame can therefore cause out-of-bounds reads or leave insufficient data for the Ethernet address writes. Reject frames that do not contain the base 802.11 header and data frames that do not contain their complete calculated header span.