CVE Tools
Sign in

CVE-2026-98160

staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()

Published: Sep 25, 2026Updated: Sep 25, 2026 Sources: CVE List NVD
N/ACVSS
NVD MITRE
EPSS Score
N/A
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
No Fix Available
Self-Check
Not available

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() padapter->HalData is allocated via vzalloc(), but incorrectly freed using kfree() in the rtw_sdio_if1_init() error path. Using kfree() to release this vmalloc-backed buffer can lead to memory corruption. Use rtw_hal_data_deinit() to pair the free correctly and free HalData with vfree(). The bug was first flagged by an experimental static analysis tool we are developing for kernel memory-management bugs. Manual inspection confirms that the issue is still present in current mainline. An x86_64 allyesconfig build showed no new warnings. As we do not have suitable RTL8723BS SDIO hardware to test with, no runtime testing was able to be performed.

No summary for this CVE yet.

Affected Products

Linux
oss-projectaka the linux kernel
LinuxOn-premOS
Operating Systems / linux-distro

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.

References

https://git.kernel.org/stable/c/ff6d1ba247b5c62bdb678f1069abc86ad88a1402
git.kernel.org
https://git.kernel.org/stable/c/d6158333d630a1b21d8914feaf77a6f5deb185d9
git.kernel.org
https://git.kernel.org/stable/c/6c017ab2b0e1b60b5be94636c94720347213d78b
git.kernel.org
and 5 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-98160 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store