The Linux kernel rtl8723bs staging driver contained a vulnerability (CVE-2026-64441) due to missing bounds checks in three parsing functions: rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr(). Specifically, these functions iterated over raw IE buffers without verifying that header bytes and multi-byte comparisons were within the remaining buffer length, leading to potential out-of-bounds reads. The fix involved adding bounds checks before loop bodies, guarding multi-byte comparisons with minimum length requirements, and adding early returns when buffer lengths were insufficient.

The vulnerability allows out-of-bounds reads in the affected parsing functions of the rtl8723bs driver in the Linux kernel. This could potentially lead to kernel memory disclosure or instability. However, no known exploits are reported in the wild at this time.

A fix has been implemented in the Linux kernel staging rtl8723bs driver by adding necessary bounds checks and early returns to prevent out-of-bounds reads. Users and administrators should update to a Linux kernel version that includes this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the exact fixed versions and apply updates accordingly.