CVE-2026-64505

Summary

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check for header

Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < 200dd5092296ad4d5ae47f8445a2fb1edd1da973affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < 9ffd567d7bf269824dfac06f8ab9a32fef72699baffected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < b73c0142e3acdc063b50c33afb7be19cdb2cd410affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < ba2cc601e59fe68716646199a33303493513e2e3affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < 7515a6d4a9e9e4838b833825882efa00e85f8901affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < 9facd79028a7807879eb441d12f0e00720980aa3affected
LinuxLinux6cdee106e7571751ecc0e9f96606322f88b64a8d < 21b5bf155435008e0fb0736795289788e63d426faffected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc3 <= *unaffected

Weaknesses

References