Re: [PATCH 5.10] staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

From: Михаил Дмитриченко

Date: Mon Oct 12 2026 - 13:52:24 EST


On Mon, 12 Oct 2026 at 17:19 MSK, Luka Gejak <luka.gejak@xxxxxxxxx> wrote:
> It seems to me that this was sent by accident by running git format-patch -1
>
> You probably forgot to commit so git made last commit into a patch file.
>
> Either way staging rtl8723bs is getting removed in linux 7.4 so any
> further commits for rtl8723bs are discouraged.

Hi Luka,

Thanks for taking a look. This was intentional: it is a backport of
your reviewed fix f9654207e922 for the 5.10.y stable tree (hence the
[PATCH 5.10] prefix). The upstream commit is tagged Cc: stable and is
already in 5.15.y and newer, but 5.10.y is still missing it
(CVE-2026-64444).

As far as I understand, the removal in 7.4 affects mainline only; the
driver is still part of 5.10.y, so the fix is still relevant there.

Best regards,
Mikhail