The rtl8723bs Wi‑Fi driver contains a flaw where cfg80211_inform_bss_frame() may return NULL during a failure, causing an allocated buffer to remain unfreed before the function exits. The unfreed buffer accumulates in kernel space, creating a memory leak that could grow with repeated driver failures. The lack of deallocation affects the integrity of kernel memory, potentially leading to degraded performance or a kernel crash if memory supply is exhausted.

All Linux kernel builds that ship the rtl8723bs driver are potentially impacted. The vendor is Linux, and product is the Linux kernel. No specific version range is supplied; any kernel containing the driver before the published patch may be vulnerable.

Based on the description, the attack vector is inferred to be local, requiring an attacker to have local access to provoke a driver failure. The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% suggests very low likelihood of exploitation. The vulnerability is not listed in CISA KEV. Although the failure path can be triggered relatively easily, the impact is contained to a kernel memory leak, and the overall risk remains moderate unless an attacker can induce sustained driver failures to exhaust memory.