CVE-2026-72490 Linux CVE debrief

Who should care

Linux kernel developers and users who utilize the staging: rtl8723bs module should be aware of this vulnerability. They should verify the Linux kernel version and check if the affected module is in use. Additionally, they should review the official CVE record and NVD detail page for further information and apply any available vendor remediation or patches.

Technical summary

The Linux kernel vulnerability is in the staging: rtl8723bs module, specifically in the rtw_aes_decrypt function. The null-pointer-guard was incorrect, returning _FAIL on a valid pointer. This issue has been resolved. The vulnerability affects Linux kernel developers and users who utilize the staging: rtl8723bs module. To address this vulnerability, it is essential to verify the Linux kernel version and check if the affected module is in use.

Defensive priority

Low priority, as the vulnerability is in a staging module and has been resolved.

Recommended defensive actions

• Verify the Linux kernel version and check if the affected module is in use.
• Check for and apply any available vendor remediation or patches.
• Monitor for any subsequent updates or advisories from the Linux kernel community.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The evidence for CVE-2026-72490 is limited; verify with primary official records. The CVE is related to a Linux kernel vulnerability in the staging: rtl8723bs module, specifically in the rtw_aes_decrypt function. The null-pointer-guard was incorrect, returning _FAIL on a valid pointer. To verify, defenders should check the Linux kernel version and the use of the affected module. Additional verification tasks include reviewing the official CVE record and NVD detail page for further information.

Official resources