In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: function: rndis: add length check for header

Add a length check for the rndis header in rndis_rm_hdr, to ensure that
MessageType, MessageLength, DataOffset, and DataLength fields are
present before they are accessed.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 200dd5092296ad4d5ae47f8445a2fb1edd1da973
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 9ffd567d7bf269824dfac06f8ab9a32fef72699b
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < b73c0142e3acdc063b50c33afb7be19cdb2cd410
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ba2cc601e59fe68716646199a33303493513e2e3
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 7515a6d4a9e9e4838b833825882efa00e85f8901
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 9facd79028a7807879eb441d12f0e00720980aa3
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 21b5bf155435008e0fb0736795289788e63d426f
0 affected < 5.10.261
0 affected < 5.15.212
0 affected < 6.1.178
0 affected < 6.6.145
0 affected < 6.12.96
0 affected < 6.18.39
0 affected < 7.1.4
Linux Linux affected
Version Status Constraints
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/200dd5092296ad4d5ae47f8445a2fb1edd1da973 cve-icon
https://git.kernel.org/stable/c/21b5bf155435008e0fb0736795289788e63d426f cve-icon
https://git.kernel.org/stable/c/7515a6d4a9e9e4838b833825882efa00e85f8901 cve-icon
https://git.kernel.org/stable/c/9facd79028a7807879eb441d12f0e00720980aa3 cve-icon
https://git.kernel.org/stable/c/9ffd567d7bf269824dfac06f8ab9a32fef72699b cve-icon
https://git.kernel.org/stable/c/b73c0142e3acdc063b50c33afb7be19cdb2cd410 cve-icon
https://git.kernel.org/stable/c/ba2cc601e59fe68716646199a33303493513e2e3 cve-icon
https://git.kernel.org/stable/c/d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.
Title usb: gadget: function: rndis: add length check for header
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:51:59.618Z

Reserved: 2026-07-19T15:36:31.793Z

Link: CVE-2026-64505

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.