A flaw in the rtl8723bs wireless driver’s AES decryption routine caused the null‑pointer guard to return a failure status on a valid pointer, instead of correctly verifying an invalid pointer. The incorrect guard logic can lead to unintended failures or kernel panics when the driver processes decryption requests, resulting in loss of service as a kernel crash would disrupt system availability and could require a reboot to recover. The issue is a classic example of a null‑pointer dereference bug, classified as a CWE‑476, where improper handling of pointers breaks program control flow. No publicly disclosed exploitation code exists, and the vulnerability is contained within the kernel driver, making remote exploitation impractical without local code execution. The risk is therefore limited to local or privileged users who can influence the driver’s input streams.

The vulnerability affects the Linux kernel, specifically versions that include the staging rtl8723bs driver. Systems relying on the rtl8723bs wireless adapter are impacted; all other Linux kernel builds are unaffected.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating that it is not currently targeted by known exploits. The CVSS score is 5.5, indicating a medium severity impact that can cause a kernel crash and deny service. Attackers would most likely need to supply crafted Wi‑Fi packets or otherwise trigger the AES decryption path locally, making the threat model primarily local.