---
id: CVE-2026-64443
title: >-
  kernel: staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
  (CVE-2026-64443)
summary: >-
  A flaw was found in the Linux kernel. A remote attacker could exploit an
  out-of-bounds read vulnerability in the `update_beacon_info()` function by
  sending a specially crafted wireless Beacon frame containing a malformed
  Information Elemen…
severity: low
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'
cvssSource: cna
cwe: CWE-125
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    5e8db4cff5b45c7c4edc8ae3f302027c3bb32b25
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    6dd5e8c3011ebabf417257d7f07901a7c4311539
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    9193c34f75fd9e1ea8a590d7cced464c3380dc29
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    bd953d52d587d42365e399b96c52dbdb13032070
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    69f174a0673b6b7a29b851adb60bc450cdc0ecc4
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    b5cc2f999927f69723ca53f1f2a3aa37dbeda907
  - >-
    Linux >= 554c0a3abf216c991c5ebddcdb2c08689ecd290b <
    ed51de4a86e173c3b0ef78e039c2e49e08b11f16
  - Linux 4.12
published: '2026-07-25'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T23:44:43+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64443.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64443.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-64443'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2507069'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-64443'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-64443'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026072539-CVE-2026-64443-04dd@gregkh/T
  - url: 'https://git.kernel.org/stable/c/5e8db4cff5b45c7c4edc8ae3f302027c3bb32b25'
  - url: 'https://git.kernel.org/stable/c/6dd5e8c3011ebabf417257d7f07901a7c4311539'
  - url: 'https://git.kernel.org/stable/c/9193c34f75fd9e1ea8a590d7cced464c3380dc29'
  - url: 'https://git.kernel.org/stable/c/bd953d52d587d42365e399b96c52dbdb13032070'
  - url: 'https://git.kernel.org/stable/c/69f174a0673b6b7a29b851adb60bc450cdc0ecc4'
  - url: 'https://git.kernel.org/stable/c/b5cc2f999927f69723ca53f1f2a3aa37dbeda907'
  - url: 'https://git.kernel.org/stable/c/ed51de4a86e173c3b0ef78e039c2e49e08b11f16'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.0028
epssPercentile: 0.20411
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T15:40:53.876241Z'
ingestedAt: '2026-10-16T17:24:46.820Z'
---

## Overview

A flaw was found in the Linux kernel. A remote attacker could exploit an out-of-bounds read vulnerability in the `update_beacon_info()` function by sending a specially crafted wireless Beacon frame containing a malformed Information Element (IE). This could lead to the disclosure of sensitive information or cause a denial of-service (DoS) on the affected system.

## Vendor advisories

- **Red Hat VEX** · Low · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64443.json)

**kernel: staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop** — rated Low by Red Hat. Released 2026-07-25, updated 2026-10-19.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9

## Remediation

Refer to the advisory for fix availability.