Riskcovery

CVE-2026-68088

usb: gadget: function: rndis: add length check to response query

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check to response query

Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them.

This is identical to how rndis_set_response() handles these parameters.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before efcf4e4eeea0d69d8da72a7bc5cbd49b6192260eAffected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before bb2b4402b4571b0c989b977779f7be01107ca425Affected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before 585921866d2d7d65d4b0d89927c78f784668cf5fAffected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before caea8b120604312bab2bfeb1a972f9cd17019e93Affected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before f5870777458d8be65d7cd08bc750a03f17998350Affected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before e01e7814b4223560eab0513b7c15b8c82bdc83f3Affected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before b09716040f3fa4a252eeda3ceb5295ea0e39c1fbAffected
  • 340600ab4cf0cc41efd01a65af97ebb7d35a7f85 to before 95f90eea070837f7c72207d5520f805bdefc3bc5Affected
LinuxLinux
  • 2.6.13Affected
  • before 2.6.13Not affected
  • 5.10.261 through 5.10.*Not affected
  • 5.15.212 through 5.15.*Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.