CVE-2026-53179

HighCVSS 7.1/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: fix buffer over-read in rtw_update_protection

rtw_update_protection() is called with a pointer offset into the ies buffer but the full ie_length is passed, causing a potential buffer over-read.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= d3fcee1b78a533c256077f1300dd236801397cf7, < d95edbbf7830d77ad68d437c384055eac8cd9892; >= d3fcee1b78a533c256077f1300dd236801397cf7, < c35ce55b12bb8fcd365daeb516e9782048119b36; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 735dabdf21561a24d8bcae456c9c32f7f961a029; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 303f65af819f6d5aa302e82bce72b57a8575faea; >= d3fcee1b78a533c256077f1300dd236801397cf7, < 514ab98364595007d4557ecc85d7e5f012c504d3
LinuxLinux5.15

References

Timeline

Published
Jun 25, 2026
Last modified
Oct 21, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-53184.3A weakness has been identified in LibRaw up to 0.22.0. This impacts the function HuffTable::initval of the file src/decompressors/losslessjpCVE-2026-531807.5In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remote_up() tmigr_handlCVE-2026-531815.5In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_tranCVE-2026-531827.8In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems(CVE-2026-531837.5In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `windoCVE-2026-531847.5In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP receivCVE-2026-531857.8In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page()CVE-2026-531869.1In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_process_CVE-2026-531877.1In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc The cpu_idCVE-2026-531888.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko poinCVE-2026-531897.8In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_hugCVE-2026-53194.3A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file
CVE-2026-53179: High severity, CVSS 7.1 | Vulnix