CVE-2026-68088: usb: gadget: function: rndis: add length check to response query
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: function: rndis: add length check to response query
Add variable representations for BufLength and BufOffset in rndisqueryresponse(), and perform a length check on them.
This is identical to how rndissetresponse() handles these parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68088?
CVE-2026-68088 has a risk rating of 27.
How do I fix CVE-2026-68088?
To fix CVE-2026-68088, update your Linux kernel to the latest version provided by your distribution.
What type of vulnerability is CVE-2026-68088?
CVE-2026-68088 is a vulnerability related to improper input validation in the USB gadget functionality of the Linux kernel.
What are the potential impacts of CVE-2026-68088?
Exploitation of CVE-2026-68088 could lead to disruption of USB communications and potential stability issues with affected devices.
Is there an exploit available for CVE-2026-68088?
At this time, there is no publicly disclosed exploit for CVE-2026-68088, but it is recommended to apply the patch to mitigate any risks.