An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() supplicant_ie is a 256-byte     array in struct security_priv. The WPA and WPA2 IE copy paths use:
    memcpy(padapter->securitypriv.supplicant_ie, &pwpa[0], wpa_ielen + 2); where wpa_ielen is the raw IE     length field (u8, 0-255). When a local user supplies a connect request via nl80211 with a crafted WPA IE     of length 255, wpa_ielen + 2 equals 257, overflowing the 256-byte buffer by one byte into the adjacent     last_mic_err_time field. rtw_parse_wpa_ie() does not prevent this: its length consistency check compares
    *(wpa_ie+1) against (u8)(wpa_ie_len-2), which is (u8)(255) == 255 when wpa_ie_len = 257, so the check     passes silently. Add explicit bounds checks for both the WPA and WPA2 paths before the memcpy, rejecting     any IE whose total size (wpa_ielen + 2) exceeds the supplicant_ie buffer. (CVE-2026-64446)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
329325	Photon OS 5.0: Linux PHSA-2026-5.0-0928	Nessus	PhotonOS Local Security Checks	7/24/2026	7/31/2026	medium
329899	Linux Distros Unpatched Vulnerability : CVE-2026-64446	Nessus	Misc.	7/25/2026	7/28/2026	high

Detections

Analytics

Plugins Search

medium

high