CVE-2026-64547

A flaw was found in the Linux kernel's net1080 USB network adapter driver. A malicious NetChip 1080 device could send a specially crafted network frame with an invalid packet length. This could lead to an out-of-bounds read when processing the packet, causing a system crash and resulting in a denial of service.

This vulnerability is rated as having a Moderate impact because successful exploitation requires either physical access to attach a malicious USB device to the host or local privileges to attach an emulated device to a virtualized guest. In standard Red Hat Enterprise Linux server environments, physical USB interfaces are typically restricted and NetChip 1080 hardware is not commonly deployed. While processing malformed frames can trigger an out-of-bounds memory read and crash the system, the attack surface cannot be reached remotely over standard network connections.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.