CVE-2025-68256: Linux

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser The Information Element (IE) parser rtw_get_ie() trusted the length byte of each IE without validating that the IE body (len bytes after the 2-byte header) fits inside the remaining frame buffer. A malformed frame can advertise an IE length larger than the available data, causing the parser to increment its pointer beyond the buffer end. This results in out-of-bounds reads or, depending on the pattern, an infinite loop. Fix by validating that (offset + 2 + len) does not exceed the limit before accepting the IE or advancing to the next element. This prevents OOB reads and ensures the parser terminates safely on malformed frames.

Affected products

• Linux Linux: from 4.12, before 5.15.203 (fixed in 5.15.203); from 5.16, before 6.1.160 (fixed in 6.1.160); from 6.2, before 6.6.120 (fixed in 6.6.120); from 6.7, before 6.12.62 (fixed in 6.12.62); from 6.13, before 6.17.12 (fixed in 6.17.12); from 6.18, before 6.18.1 (fixed in 6.18.1)

Published 2025-12-16. Last modified 2026-07-30.