CVE-2026-31616

kernel: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's USB gadget Phonet function. A remote attacker, acting as a malicious USB host, could exploit this vulnerability by sending a continuous stream of full-page data transfers. This action causes an overflow in the kernel's internal data structures, leading to memory corruption. This memory corruption could result in a denial of service or potentially allow for arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write