CVE-2026-64505

usb: gadget: function: rndis: add length check for header

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check for header

Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6cdee106e7571751ecc0e9f96606322f88b64a8d to before 200dd5092296ad4d5ae47f8445a2fb1edd1da973Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before 9ffd567d7bf269824dfac06f8ab9a32fef72699bAffected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before b73c0142e3acdc063b50c33afb7be19cdb2cd410Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before ba2cc601e59fe68716646199a33303493513e2e3Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before 7515a6d4a9e9e4838b833825882efa00e85f8901Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before 9facd79028a7807879eb441d12f0e00720980aa3Affected 6cdee106e7571751ecc0e9f96606322f88b64a8d to before 21b5bf155435008e0fb0736795289788e63d426fAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

6cdee106e7571751ecc0e9f96606322f88b64a8d to before 200dd5092296ad4d5ae47f8445a2fb1edd1da973Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before 9ffd567d7bf269824dfac06f8ab9a32fef72699bAffected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before b73c0142e3acdc063b50c33afb7be19cdb2cd410Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before ba2cc601e59fe68716646199a33303493513e2e3Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before 7515a6d4a9e9e4838b833825882efa00e85f8901Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before 9facd79028a7807879eb441d12f0e00720980aa3Affected
6cdee106e7571751ecc0e9f96606322f88b64a8d to before 21b5bf155435008e0fb0736795289788e63d426fAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.