https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:36:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74648 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>staging: rtl8723bs: validate monitor transmit frame lengths</p> <p>rtw_cfg80211_monitor_if_xmit_entry() removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains.</p> <p>The data path also pulls the calculated 802.11, QoS and SNAP header span before confirming that the skb contains it. A truncated frame can therefore cause out-of-bounds reads or leave insufficient data for the Ethernet address writes.</p> <p>Reject frames that do not contain the base 802.11 header and data frames that do not contain their complete calculated header span.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>staging: rtl8723bs: validate monitor transmit frame lengths</p> <p>rtw_cfg80211_monitor_if_xmit_entry() removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains.</p> <p>The data path also pulls the calculated 802.11, QoS and SNAP header span before confirming that the skb contains it. A truncated frame can therefore cause out-of-bounds reads or leave insufficient data for the Ethernet address writes.</p> <p>Reject frames that do not contain the base 802.11 header and data frames that do not contain their complete calculated header span.</p> https://vulnerability.circl.lu/vuln/cve-2026-74648