Bug 2467165 (CVE-2026-43225)

Summary:	CVE-2026-43225 kernel: staging: rtl8723bs: fix memory leak on failure path
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's rtl8723bs component. This memory leak vulnerability occurs when the `cfg80211_inform_bss_frame()` function returns a NULL value on a failure path, preventing the allocated buffer from being properly freed. This can lead to a potential memory leak within the system.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-05-06 13:08:01 UTC

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: fix memory leak on failure path

cfg80211_inform_bss_frame() may return NULL on failure. In that case,
the allocated buffer 'buf' is not freed and the function returns early,
leading to potential memory leak.
Fix this by ensuring that 'buf' is freed on both success and failure paths.

Comment 1 Keith Grant 2026-05-06 22:12:40 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026050654-CVE-2026-43225-f99b@gregkh/T