CVE-2026-46305

staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-46305

Published

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc The return value of kzalloc_flex() is used without ensuring that the allocation succeeded, and the pointer is dereferenced unconditionally. Guard the access to the allocated structure to avoid a potential NULL pointer dereference if the allocation fails.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-46305

Published

Linux

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/staging/rtl8723bs/os_dep/osdep_service.c"
                    ],
                    "versions": [
                        {
                            "version": "368f19a5ed15f396db4ec2182c1311a7fa4f993b",
                            "lessThan": "7d4024037ee309a8f0cb86b4093d59da0e135db8",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "980cd426a25747daf8ed25e2a1904b2d26ffbb3d",
                            "lessThan": "0a5f411becfb7c57aa89827213d31ef23a03d75a",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "980cd426a25747daf8ed25e2a1904b2d26ffbb3d",
                            "lessThan": "bc851db06045a40c18233dd76ef0562d7f8bb6db",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Linux

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "drivers/staging/rtl8723bs/os_dep/osdep_service.c"
                    ],
                    "versions": [
                        {
                            "version": "7.0",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "7.0",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.0.7",
                            "lessThanOrEqual": "7.0.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "7.1",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON