Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64505

usb: gadget: function: rndis: add length check for header

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < 200dd5092296ad4d5ae47f8445a2fb1edd1da973affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < 9ffd567d7bf269824dfac06f8ab9a32fef72699baffected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < b73c0142e3acdc063b50c33afb7be19cdb2cd410affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < ba2cc601e59fe68716646199a33303493513e2e3affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < 7515a6d4a9e9e4838b833825882efa00e85f8901affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < 9facd79028a7807879eb441d12f0e00720980aa3affected
  • 6cdee106e7571751ecc0e9f96606322f88b64a8d to < 21b5bf155435008e0fb0736795289788e63d426faffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References