CVE-2026-64505: usb: gadget: function: rndis: add length check for header
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: function: rndis: add length check for header
Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64505?
The severity of CVE-2026-64505 is rated at 37, indicating a moderate risk level.
How do I fix CVE-2026-64505?
To fix CVE-2026-64505, update the Linux kernel to the latest version that incorporates the length check for the RNDIS header.
What systems are affected by CVE-2026-64505?
CVE-2026-64505 affects systems running vulnerable versions of the Linux kernel that utilize the RNDIS function.
What does CVE-2026-64505 address?
CVE-2026-64505 addresses a vulnerability by adding a length check for the RNDIS header to prevent improper access to the message fields.
When was CVE-2026-64505 published?
CVE-2026-64505 was published on July 25, 2026.