CVE-2026-53178

HighCVSS 8.1/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction

Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-191

Affected software

VendorProductVersions
LinuxLinux>= d3fcee1b78a533c256077f1300dd236801397cf7, < 18143799ad51a32b1351e4e1591b6285a0a9d7dd; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 637e0ea73f690028796ee2fc72a2ac4ec32968c6; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 542d65a6dbd9733baab96313c9fe76a76e93f484; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 88e994c57a79f62d5338231d8d37ee8dd98baffe; 1b786350924cc0fa30d4434470b32f24e8ddd107; >= 5.10.273, < 5.11
LinuxLinux5.15

References

Timeline

Published
Jun 25, 2026
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-531797.1In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer over-read in rtw_update_protection rtw_CVE-2026-53184.3A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpCVE-2026-531807.5In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remote_up() tmigr_handlCVE-2026-531815.5In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_tranCVE-2026-531827.8In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems(CVE-2026-531837.5In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `windoCVE-2026-531847.5In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP receivCVE-2026-531857.8In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page()CVE-2026-531869.1In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_process_CVE-2026-531877.1In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc The cpu_idCVE-2026-531888.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko poinCVE-2026-531897.8In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_hug
CVE-2026-53178: High severity, CVSS 8.1 | Vulnix