CVE-2026-72490 in Linux
Summary
by MITRE • 08/15/2026
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt
The null-pointer-guard was incorrect, returning _FAIL on valid pointer. Invert the guard, so it returns _FAIL on invalid pointer.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 08/15/2026
The vulnerability identified in the Linux kernel's staging driver for rtl8723bs represents a critical flaw in the wireless network adapter subsystem that could potentially lead to system instability or privilege escalation. This issue specifically affects the rtw_aes_decrypt function within the rtl8723bs driver, which handles AES decryption operations for wireless communication protocols. The problem manifests as an incorrect null-pointer guard implementation that fundamentally misclassifies valid pointer states during cryptographic processing.
The technical flaw stems from improper conditional logic within the stainfo check mechanism that governs how the driver validates pointer references during AES decryption operations. When examining the rtw_aes_decrypt function, the original implementation contained a logical inversion error in its null-pointer validation routine. This incorrect implementation would return _FAIL status when encountering valid pointers, while simultaneously failing to properly detect and reject invalid pointer references. Such a condition directly violates standard security practices for memory management and pointer validation within kernel space operations.
The operational impact of this vulnerability extends beyond simple functional failures, potentially creating opportunities for denial-of-service conditions or more severe security implications within wireless networking environments. When valid pointers are incorrectly flagged as invalid, the driver may prematurely terminate decryption processes or fail to properly handle incoming wireless frames, leading to communication disruptions that could affect network connectivity and data transmission reliability. In kernel space contexts, such pointer validation errors can create pathways for exploitation through carefully crafted malicious inputs that manipulate memory states during cryptographic operations.
This vulnerability aligns with CWE-476 which specifically addresses null pointer dereference issues in software systems, particularly within kernel drivers where improper pointer validation can lead to system crashes or security breaches. The fix implemented involves inverting the guard logic to ensure that _FAIL status is returned only when invalid pointers are detected, while valid pointers correctly proceed through the decryption process. From an ATT&CK framework perspective, this vulnerability could potentially map to technique T1059 for command and scripting interpreter usage if exploited through malicious wireless frames, or T1489 for denial of service attacks targeting system services.
The mitigation strategy requires immediate deployment of updated kernel drivers that correct the logical inversion in the null-pointer guard implementation. System administrators should prioritize applying security patches that address this specific flaw within the rtl8723bs staging driver module. Additionally, monitoring systems should be configured to detect unusual patterns in wireless network operations that might indicate exploitation attempts or system instability related to this vulnerability. The fix represents a straightforward logical correction but demonstrates the critical importance of proper pointer validation in kernel drivers where memory safety directly impacts overall system stability and security posture.
This vulnerability highlights the complexities inherent in kernel driver development where seemingly minor logic errors can have significant operational consequences, particularly within wireless networking subsystems that handle sensitive cryptographic operations. The resolution emphasizes the need for comprehensive testing of pointer validation routines and the importance of maintaining proper defensive programming practices throughout kernel space implementations to prevent exploitation scenarios that could compromise system integrity or availability.