Riskcovery

CVE-2026-46305

staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc

State
Published
Severity
Not scored
Published
Jun 8, 2026
Updated
Sep 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc

The return value of kzalloc_flex() is used without ensuring that the allocation succeeded, and the pointer is dereferenced unconditionally.

Guard the access to the allocated structure to avoid a potential NULL pointer dereference if the allocation fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 368f19a5ed15f396db4ec2182c1311a7fa4f993b to before 7d4024037ee309a8f0cb86b4093d59da0e135db8Affected
  • 980cd426a25747daf8ed25e2a1904b2d26ffbb3d to before 0a5f411becfb7c57aa89827213d31ef23a03d75aAffected
  • 980cd426a25747daf8ed25e2a1904b2d26ffbb3d to before bc851db06045a40c18233dd76ef0562d7f8bb6dbAffected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.