CVE record · CVE-2026-100076

staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths

No CVSS scoreEPSS 0.0016 · 4th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 13:06 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 973a629f19c226c8f6080badea7ccf59cc04233f git
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 17260b5215d4ced17a733e2c027a76290e476fad git
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 2f5e2752c2b4bad01df4523cfe2b41b702c60f00 git
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 6c9f6a3b9fdd31a0836b681053155b5997c0156e git
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before c48e5aa01525577d6b6e782962a5bfb0e1535cb5 git
  • affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b to before 41b8209376dffbd7b0b85c8bc4697d9166ac62ef git
Other versions: unaffected
Linux Linux
  • affected 4.12
  • unaffected before 4.12 semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.114 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-100076
CNA
Linux
Published
25 Sept 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0016, the 4th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.