CVE-2026-68088

A flaw was found in the Linux kernel's RNDIS (Remote Network Driver Interface Specification) gadget function. A missing length check for BufLength and BufOffset parameters within the rndis_query_response() function could allow a malicious actor to provide specially crafted input. This could lead to memory corruption, potentially resulting in a denial of service.

This vulnerability poses no security risk to supported Red Hat Enterprise Linux releases because the affected USB gadget RNDIS implementation is not built or enabled in shipping kernels. The underlying flaw exists within the USB peripheral controller subsystem when handling Remote NDIS queries on devices acting as USB gadgets. Standard enterprise deployments operate as USB hosts rather than configured USB gadget devices, ensuring Red Hat environments remain unaffected.