[lvc-project] [PATCH 5.10] staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

[Luka Gejak]

October 12, 2026 at 5:33 PM, "Михаил Дмитриченко" <mdmitrichenko at astralinux.ru> wrote:


> 
> On Mon, 12 Oct 2026 at 17:19 MSK, Luka Gejak <luka.gejak at linux.dev> wrote:
> 
> > 
> > It seems to me that this was sent by accident by running git format-patch -1
> > 
> >  You probably forgot to commit so git made last commit into a patch file.
> > 
> >  Either way staging rtl8723bs is getting removed in linux 7.4 so any
> >  further commits for rtl8723bs are discouraged.
> > 
> Hi Luka,
> 
> Thanks for taking a look. This was intentional: it is a backport of
> your reviewed fix f9654207e922 for the 5.10.y stable tree (hence the
> [PATCH 5.10] prefix). The upstream commit is tagged Cc: stable and is
> already in 5.15.y and newer, but 5.10.y is still missing it
> (CVE-2026-64444). 
> 
> As far as I understand, the removal in 7.4 affects mainline only; the
> driver is still part of 5.10.y, so the fix is still relevant there.
> 
> Best regards,
> Mikhail
>

Understandable, I wasn't aware it isn't backported as it seems to me
it was merged quite some time ago.

Best regards,
Luka Gejak