The Linux kernel staging driver rtl8723bs contains a faulty packet validation routine. After removing a radiotap header, rtw_cfg80211_monitor_if_xmit_entry reads the 802.11 frame control field without confirming the presence of a complete base header. If a malicious or corrupted frame is truncated, the code can read past the end of the socket buffer or leave insufficient data for subsequent Ethernet address writes, leading to an out‑of‑bounds read or memory corruption. This type of flaw is represented by CWE‑119 and can result in kernel panic or an information disclosure if the attacker controls the data stream.

All Linux kernel installations that include the rtl8723bs driver and enable monitor mode are affected. No specific version list is supplied, but the upstream patch commits show the fix was merged into mainline, so any kernel older than the commit remains vulnerable.

EPSS data is not provided and the vulnerability is not listed in the CISA KEV catalog, which indicates no publicly known exploits. Based on the description, the likely attack vector is a network‑based attacker who can transmit crafted wireless frames to the device. Exploiting the flaw requires sending a truncated frame that bypasses with monitor mode enabled, which may limit the attack surface but could still lead to a crash or data leakage if successful.