Threats tagged 'ghsa-prq3-3cx6-vrj4'

A stack buffer overflow vulnerability in the Linux kernel's rtl8723bs staging driver was fixed. The flaw involved improper handling of the Supported Rates Information Element (IE) length in Association Request frames, allowing an attacker to overflow a fixed-size 16-byte stack buffer. This could lead to kernel stack corruption triggered by malformed association requests. The fix clamps the IE length to the buffer size and corrects bounds checking for Extended Supported Rates to prevent a second overflow.