CVE-2026-64505VulnerabilityPublished 07/25/2026
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for… (CVE-2026-64505)
Source GCVE Database
Severity
MediumNo CVSS score published yet
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 5% of CVEs
What to do
AI-suggested
A fix has been implemented in the Linux kernel to add the necessary length checks. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor patches for the exact fixed versions and remediation instructions.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64505 (opens in a new tab)
- git.kernel.org/stable/c/200dd5092296ad4d5ae47f8445a2fb1edd1da973 (opens in a new tab)
- git.kernel.org/stable/c/21b5bf155435008e0fb0736795289788e63d426f (opens in a new tab)
- git.kernel.org/stable/c/7515a6d4a9e9e4838b833825882efa00e85f8901 (opens in a new tab)
- git.kernel.org/stable/c/9facd79028a7807879eb441d12f0e00720980aa3 (opens in a new tab)
- git.kernel.org/stable/c/9ffd567d7bf269824dfac06f8ab9a32fef72699b (opens in a new tab)
- git.kernel.org/stable/c/b73c0142e3acdc063b50c33afb7be19cdb2cd410 (opens in a new tab)
- git.kernel.org/stable/c/ba2cc601e59fe68716646199a33303493513e2e3 (opens in a new tab)
- git.kernel.org/stable/c/d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433 (opens in a new tab)