In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtwgetieex() Just like in commit 154828bf9559 ("staging: rtl8723bs: fix out-of-bounds read in rtwget_ie() parser"), we don't trust the data in the frame so we should check the length better before acting on it