CVE Catalog

CVE-2026-43159

Medium
Published: Translated: NVD NIST

Summary

A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the pwlan variable, which may be NULL when passed to the rtw_free_network_nolock() function, leading to dereferencing of this variable.

Risk Assessment

This vulnerability could lead to system crashes or unexpected behavior, potentially impacting the stability and security of the operating system.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix null dereference in find_network The variable pwlan has the possibility of being NULL when passed into rtw_free_network_nolock() which would later dereference the variable.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS