CVE-2026-98160 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, system administrators, and security teams responsible for Linux kernel-based systems should assess exposure and prioritize verification of affected versions and configurations.

Why it matters

A vulnerability in the Linux kernel's staging/rtl8723bs driver can lead to memory corruption due to a mismatched free of HalData in the rtw_sdio_if1_init() error path. Linux kernel developers and maintainers should assess exposure and prioritize verification of affected versions and configurations.

• Memory corruption can lead to system crashes or instability
• Potential for denial-of-service (DoS) or privilege escalation
• Verification of affected versions and configurations is necessary
• Patching or mitigation is required to prevent exploitation

Technical summary

The Linux kernel's staging/rtl8723bs driver has a vulnerability due to a mismatched free of HalData in the rtw_sdio_if1_init() error path. The bug was introduced because padapter->HalData, allocated via vzalloc(), was incorrectly freed using kfree(). To fix the issue, rtw_hal_data_deinit() should be used to pair the free correctly and free HalData with vfree(). This requires careful review of affected product deployments and configurations to ensure proper patching or mitigation. The vulnerability can lead to memory corruption, system crashes, or instability, and potentially allow for denial-of-service (DoS) or privilege escalation.

Defensive priority

Linux kernel developers and maintainers should assess exposure and prioritize verification of affected versions and configurations. System administrators and security teams should monitor for potential memory corruption issues.

Recommended defensive actions

• Review and verify affected Linux kernel versions and configurations
• Assess exposure and prioritize patching or mitigation
• Monitor system logs for potential memory corruption issues
• Perform thorough vulnerability assessment
• Implement compensating controls for exposed systems
• Track exceptions and retest remediated assets
• Review vendor-provided patches and advisories

Evidence notes

The bug was first flagged by an experimental static analysis tool for kernel memory-management bugs. Manual inspection confirms that the issue is still present in current mainline. No runtime testing was performed due to lack of suitable RTL8723BS SDIO hardware.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.