CVE-2026-68088

Not scored yetLast modified Aug 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check to response query

Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them.

This is identical to how rndis_set_response() handles these parameters.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < bb2b4402b4571b0c989b977779f7be01107ca425; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < 585921866d2d7d65d4b0d89927c78f784668cf5f; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < caea8b120604312bab2bfeb1a972f9cd17019e93; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < f5870777458d8be65d7cd08bc750a03f17998350; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < e01e7814b4223560eab0513b7c15b8c82bdc83f3; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < b09716040f3fa4a252eeda3ceb5295ea0e39c1fb; >= 340600ab4cf0cc41efd01a65af97ebb7d35a7f85, < 95f90eea070837f7c72207d5520f805bdefc3bc5
LinuxLinux2.6.13

References

Timeline

Published
Aug 10, 2026
Last modified
Aug 17, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68089In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero thenCVE-2026-68096.4The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to,CVE-2026-68090In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reportCVE-2026-680918.8In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_CVE-2026-68092In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reportedCVE-2026-68093In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision afCVE-2026-68094In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ dispatch dispatch_to_CVE-2026-68095In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion ThisCVE-2026-680967.5In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in audit_dupe_exe() A deadlock oCVE-2026-680978.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities set_ntacl_dacl() CVE-2026-680988.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs set_ntacl_dacl() can stop CVE-2026-68099In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
CVE-2026-68088: Unscored | Vulnix