CVE-2025-68255: Linux

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy() length when copying into a fixed-size 16-byte stack buffer (supportRate). A malicious station can advertise an IE length larger than 16 bytes, causing a stack buffer overflow. Clamp ie_len to the buffer size before copying the Supported Rates IE, and correct the bounds check when merging Extended Supported Rates to prevent a second potential overflow. This prevents kernel stack corruption triggered by malformed association requests.

Affected products

• Linux Linux: from 4.12, before 5.10.248 (fixed in 5.10.248); from 5.11, before 5.15.198 (fixed in 5.15.198); from 5.16, before 6.1.160 (fixed in 6.1.160); from 6.2, before 6.6.120 (fixed in 6.6.120); from 6.7, before 6.12.62 (fixed in 6.12.62); from 6.13, before 6.17.12 (fixed in 6.17.12); …

Published 2025-12-16. Last modified 2026-07-30.