# staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths

CVE record · `CVE-2026-100076`

- **Identifiers:** `CVE-2026-100076`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 13:06 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 973a629f19c226c8f6080badea7ccf59cc04233f` (git)
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 17260b5215d4ced17a733e2c027a76290e476fad` (git)
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 2f5e2752c2b4bad01df4523cfe2b41b702c60f00` (git)
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6c9f6a3b9fdd31a0836b681053155b5997c0156e` (git)
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c48e5aa01525577d6b6e782962a5bfb0e1535cb5` (git)
  - affected: `554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 41b8209376dffbd7b0b85c8bc4697d9166ac62ef` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.12`
  - unaffected: `before 4.12` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.160 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.114 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0016, the 4th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-100076](https://www.cve.org/CVERecord?id=CVE-2026-100076)
- [NVD: CVE-2026-100076](https://nvd.nist.gov/vuln/detail/CVE-2026-100076)

### References from the CNA

- <https://git.kernel.org/stable/c/973a629f19c226c8f6080badea7ccf59cc04233f>
- <https://git.kernel.org/stable/c/17260b5215d4ced17a733e2c027a76290e476fad>
- <https://git.kernel.org/stable/c/2f5e2752c2b4bad01df4523cfe2b41b702c60f00>
- <https://git.kernel.org/stable/c/6c9f6a3b9fdd31a0836b681053155b5997c0156e>
- <https://git.kernel.org/stable/c/c48e5aa01525577d6b6e782962a5bfb0e1535cb5>
- <https://git.kernel.org/stable/c/41b8209376dffbd7b0b85c8bc4697d9166ac62ef>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-100076>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-100076/>. Everything for agents: <https://agentprime.io/llms.txt>.