The Linux kernel rtl8723bs staging driver contained a vulnerability (CVE-2025-68254) where the OnBeacon ESR IE parsing accessed memory beyond the received frame buffer without verifying offsets. Specifically, it read *(p + 1 + ielen) and *(p + 2 + ielen) without boundary checks. A malformed beacon frame with an ESR IE at the buffer's end could trigger an out-of-bounds read leading to a kernel panic. The issue was resolved by adding boundary checks to ensure the ESR IE body and subsequent bytes are within the frame limits before access.

An attacker could send a malformed beacon frame that triggers an out-of-bounds read in the kernel, potentially causing a denial of service via kernel panic. The confidentiality and integrity impacts are low or none, but availability is highly impacted due to potential system crashes.

A fix has been implemented in the Linux kernel to add boundary checks preventing out-of-bounds reads in the rtl8723bs driver during ESR IE parsing. Users should apply the official kernel updates containing this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.