CVE-2026-31626

staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()

State: Published
Severity: 7.1 High
Published: Apr 24, 2026
Updated: Aug 5, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()

Initialize le_tmp64 to zero in rtw_BIP_verify() to prevent using uninitialized data.

Smatch warns that only 6 bytes are copied to this 8-byte (u64) variable, leaving the last two bytes uninitialized:

drivers/staging/rtl8723bs/core/rtw_security.c:1308 rtw_BIP_verify() warn: not copying enough bytes for '&le_tmp64' (8 vs 6 bytes)

Initializing the variable at the start of the function fixes this warning and ensures predictable behavior.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6792624d933146e2757b07092e93ad915cb58930Affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 51532c7c1d357145f4ac561648499f7a6847f739Affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 9e911eead187240193516edf55a0e1ab3425aa5bAffected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c65ee4d3be5df395e48afbcd0946dd5fce4338a9Affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d5b8f5f8d6fc09a8af5ed139c688660f578ed732Affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before b487a7754d874230299d5a9c2710ec4df8b2ed8aAffected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c2026c6b603ebec52f55015496703fe79077accfAffected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before ef74ce5f0bc0e53ce702d8a794f3957884a26efcAffected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 8c964b82a4e97ec7f25e17b803ee196009b38a57Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.136 through 6.6.Not affected 6.12.83 through 6.12.Not affected 6.18.24 through 6.18.Not affected 6.19.14 through 6.19.Not affected 7.0.1 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6792624d933146e2757b07092e93ad915cb58930Affected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 51532c7c1d357145f4ac561648499f7a6847f739Affected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 9e911eead187240193516edf55a0e1ab3425aa5bAffected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c65ee4d3be5df395e48afbcd0946dd5fce4338a9Affected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before d5b8f5f8d6fc09a8af5ed139c688660f578ed732Affected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before b487a7754d874230299d5a9c2710ec4df8b2ed8aAffected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c2026c6b603ebec52f55015496703fe79077accfAffected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before ef74ce5f0bc0e53ce702d8a794f3957884a26efcAffected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 8c964b82a4e97ec7f25e17b803ee196009b38a57Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.136 through 6.6.*Not affected
6.12.83 through 6.12.*Not affected
6.18.24 through 6.18.*Not affected
6.19.14 through 6.19.*Not affected
7.0.1 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.