CVE-2026-64505

MediumCVSS 5.5/10Last modified Nov 12, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check for header

Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 200dd5092296ad4d5ae47f8445a2fb1edd1da973; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 9ffd567d7bf269824dfac06f8ab9a32fef72699b; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < b73c0142e3acdc063b50c33afb7be19cdb2cd410; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < ba2cc601e59fe68716646199a33303493513e2e3; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 7515a6d4a9e9e4838b833825882efa00e85f8901; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 9facd79028a7807879eb441d12f0e00720980aa3; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 21b5bf155435008e0fb0736795289788e63d426f
LinuxLinux2.6.12

References

Timeline

Published
Jul 25, 2026
Last modified
Nov 12, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-645065.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previouCVE-2026-645075.5In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening agaCVE-2026-645085.5In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator CVE-2026-645095.5In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build() still hCVE-2026-64514.3The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0. TCVE-2026-645107.0In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_initCVE-2026-645115.5In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9CVE-2026-64512In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definitiCVE-2026-64513In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPCVE-2026-64514In the Linux kernel, the following vulnerability has been resolved: userfaultfd: gate must_wait writability check on pte_present() userfauCVE-2026-645158.3In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multiCVE-2026-645168.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO conta
CVE-2026-64505: Medium severity, CVSS 5.5 | Vulnix