OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64505

UNKNOWN · CVSS N/A EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

A vulnerability exists in the Linux kernel's RNDIS gadget function, where insufficient length checks for the RNDIS header could lead to potential memory access issues. This flaw may allow an attacker to exploit the header fields, potentially leading to system instability or unauthorized access. Linux system administrators and developers utilizing the RNDIS function should prioritize applying the relevant patches to mitigate this risk.

CVE
CVE-2026-64505
Severity
UNKNOWN
CVSS
N/A
EPSS
0.22%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.