CVE-2026-64442 is an out-of-bounds read vulnerability in the Linux kernel's rtl8723bs staging driver. Specifically, the functions issue_assocreq() and join_cmd_hdl() parse IE buffers without verifying that the length field is within the buffer bounds. If a malicious access point sends a truncated final IE with only an element_id byte and no length byte, the code reads one byte past the buffer end. The fix applies a two-guard pattern to break parsing if fewer than the size of the IE header remain or if the declared IE data extends beyond the buffer end.

An attacker controlling a malicious access point can trigger out-of-bounds reads in the affected driver by sending malformed beacon or probe-response frames with truncated information elements. This could potentially lead to kernel memory disclosure or instability. However, no known exploits are reported in the wild at this time.

A fix for this vulnerability has been implemented in the Linux kernel by adding proper bounds checks in the affected IE parsing loops. Users should apply the official kernel updates that include this patch when available. Since this is not a cloud service, remediation depends on applying the updated kernel version. Patch status is not yet confirmed in the provided data—check the vendor advisory or Linux kernel mailing lists for the current remediation status and updated kernel versions.