CVE-2026-80814

Summary

In the Linux kernel, the following vulnerability has been resolved:

rndis_host: add overflow check in rndis_rx_fixup()

Add an overflow check to ensure that data_offset + data_len + 8 does not wrap, which would enable an OOB read of the USB data buffer.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2140db1232af04b92faa6c4a2a40df6371ea89ffaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f8e6fde5db87f855e99b200e392467274f0eb9d7affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 10a6b99079697c5027b25352e882bdf54fef702aaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c5398ce6db7647b7004d73a3102ccc25fb4bb596affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e971d956353d382ee2185d71c47b538501a43f76affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < be7dc3650f799a253df4edd4fe230fc9ea4be063affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 965a251f23ff69cfb4486974d4532e9bb551c7fcaffected
LinuxLinux0 < 5.10.267affected
LinuxLinux0 < 5.15.218affected
LinuxLinux0 < 6.1.185affected
LinuxLinux0 < 6.6.154affected
LinuxLinux0 < 6.12.106affected
LinuxLinux0 < 6.18.47affected
LinuxLinux0 < 7.1.11affected
LinuxLinux0 < 7.2.1affected
LinuxLinux5.10.267 <= 5.10.*unaffected
LinuxLinux5.15.218 <= 5.15.*unaffected
LinuxLinux6.1.185 <= 6.1.*unaffected
LinuxLinux6.6.154 <= 6.6.*unaffected
LinuxLinux6.12.106 <= 6.12.*unaffected
LinuxLinux6.18.47 <= 6.18.*unaffected
LinuxLinux7.1.11 <= 7.1.*unaffected
LinuxLinux7.2.1 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References