CVE-2026-31626

EUVD-2026-25519
In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()

Initialize le_tmp64 to zero in rtw_BIP_verify() to prevent using
uninitialized data.

Smatch warns that only 6 bytes are copied to this 8-byte (u64)
variable, leaving the last two bytes uninitialized:

drivers/staging/rtl8723bs/core/rtw_security.c:1308 rtw_BIP_verify()
warn: not copying enough bytes for '&le_tmp64' (8 vs 6 bytes)

Initializing the variable at the start of the function fixes this
warning and ensures predictable behavior.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.12 ≤
𝑥
< 6.6.136
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.83
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.24
linuxlinux_kernel
6.19 ≤
𝑥
< 6.19.14
linuxlinux_kernel
7.0 ≤
𝑥
< 7.0.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.176-1
fixed
bookworm (security)
6.1.177-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.259-1
fixed
forky
7.1.3-1
fixed
sid
7.1.4-1
fixed
trixie
6.12.94-1
fixed
trixie (security)
6.12.96-1
fixed
linux-6.1
bullseye (security)
6.1.176-1~deb11u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.2
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.2
fixed
kernel-default-base
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.2.150700.17.41.4
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.2.150700.17.41.4
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.2.150700.17.41.4
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.2
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.73.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.73.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kernel
Azure Linux 3.0
0:6.6.137.1-1.azl3
fixed