rtl8723bs

About this tag
The rtl8723bs tag covers security vulnerabilities and fixes in the Linux kernel's staging driver for the Realtek RTL8723BS wireless chipset. Recent discussions focus on three CVEs: CVE-2025-68256 hardens the IE parser against out-of-bounds reads, CVE-2025-68255 fixes a stack buffer overflow in Association Request handling, and CVE-2025-68254 patches an out-of-bounds read in Extended Supported Rates parsing. These issues affect low-power PCs, single-board computers, and embedded devices using SDIO Wi-Fi. The tag is relevant for Linux kernel developers, system administrators, and security researchers tracking driver stability and security updates.
  1. CVE-2025-68256: Linux RTL8723BS IE Parser Hardened Against OOB Reads

    A newly assigned security record, CVE-2025-68256, closes a dangerous gap in the Linux kernel’s staging Realtek driver for the RTL8723BS wireless chipset by hardening the driver’s Information Element (IE) parser — rtw_get_ie — against an out‑of‑bounds read that could be triggered by a malformed...
  2. CVE-2025-68255: Linux rtl8723bs Stack Overflow Fix in Kernel

    A new Linux kernel CVE has been published that fixes a straightforward—but dangerous—stack buffer overflow in the Realtek staging driver rtl8723bs; the bug allows a malformed wireless Association Request to overflow a 16‑byte stack buffer when parsing the Supported Rates Information Element...
  3. CVE-2025-68254 Fix: Linux rtl8723bs ESR IE Parsing Out-of-Bounds Read

    A recently assigned vulnerability, CVE-2025-68254, patches an out‑of‑bounds read in the Linux kernel’s staging rtl8723bs Wi‑Fi driver by hardening the Extended Supported Rates (ESR) Information Element parsing in OnBeacon handling — a malformed beacon could otherwise force the driver to read...