[PATCH v2 0/2] staging: rtl8723bs: fix OOB write in HT_caps_handler and OOB read in OnAssocRsp

Alexandru Hossu
2026-04-27T08:19:37Z

v2, addressing Greg's feedback on 1/2. Greg, please drop your patch
and take this one instead.

Changes from v1:
- 1/2: switch from early return to min_t() truncation, so APs that
send an oversized HT Caps element are handled gracefully rather
than rejected outright (Greg KH)

2/2 is unchanged from v1.

Alexandru Hossu (2):
staging: rtl8723bs: fix OOB write in HT_caps_handler()
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 4 ++++
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 ++-
2 files changed, 6 insertions(+), 1 deletion(-)

--
2.53.0