CVE-2026-53178

Katalog CVE

CVSS 8.1 · High EPSS 0,22%

Kerentanan Integer Underflow (Wrap or Wraparound) pada linux kernel. Skor CVSS 3.1 8.1 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

14 September 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 12,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/542d65a6dbd9733baab96313c9fe76a76e93f484 patch
• https://git.kernel.org/stable/c/88e994c57a79f62d5338231d8d37ee8dd98baffe patch
• https://git.kernel.org/stable/c/637e0ea73f690028796ee2fc72a2ac4ec32968c6