What’s Vulnerable › Vulnerabilities

CVE-2026-43225: staging: rtl8723bs: fix memory leak on failure path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-06 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In that case, the allocated buffer 'buf' is not freed and the function returns early, leading to potential memory leak. Fix this by ensuring that 'buf' is freed on both success and failure paths.

Affected products

• Linux kernel: from 4.12 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6 — fixed in 5.15.202, 6.1.165, 6.12.75, 6.18.16, 6.19.6, 6.6.128

How to fix

Upgrade to a fixed version: Linux kernel 5.15.202, 6.1.165, 6.12.75, 6.18.16. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/017295b17bf1f477246c95bd253a7ef0cb4684c9
• https://git.kernel.org/stable/c/8311bb40698ba027649d5d1ca84ad4bf25270546
• https://git.kernel.org/stable/c/9874e33ce52ba449ab0ade78752a2d37a2294617
• https://git.kernel.org/stable/c/9f70f78e22b321429afc77befecedf05543d4e2c
• https://git.kernel.org/stable/c/a968c6a39607c129b8ac2c3c2a5e8923574e90d0
• https://git.kernel.org/stable/c/abe850d82c8cb72d28700673678724e779b1826e
• https://git.kernel.org/stable/c/af48c1a0abe849e167fc754b6c260b6d8350b6fd

Get alerted when CVE-2026-43225 or the next vulnerability affects your stack