CVE-2026-64505
kernel: usb: gadget: function: rndis: add length check for header
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · July 29, 2026
Description
A flaw was found in the Linux kernel's USB RNDIS gadget function. A missing length check for the RNDIS header in the rndis_rm_hdr function could allow an attacker to read data beyond the intended buffer. This out-of-bounds read vulnerability could lead to information disclosure or potentially a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-125 · Out-of-bounds Read