{"id":"CVE-2026-80814","title":"rndis_host: add overflow check in rndis_rx_fixup()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrndis_host: add overflow check in rndis_rx_fixup()\n\nAdd an overflow check to ensure that data_offset + data_len + 8 does not\nwrap, which would enable an OOB read of the…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2140db1232af04b92faa6c4a2a40df6371ea89ff","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < f8e6fde5db87f855e99b200e392467274f0eb9d7","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 10a6b99079697c5027b25352e882bdf54fef702a","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < c5398ce6db7647b7004d73a3102ccc25fb4bb596","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < e971d956353d382ee2185d71c47b538501a43f76","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < be7dc3650f799a253df4edd4fe230fc9ea4be063","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1","Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 965a251f23ff69cfb4486974d4532e9bb551c7fc","Linux 2.6.14"],"published":"2026-09-04","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:44:08.040Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80814","references":[{"url":"https://git.kernel.org/stable/c/2140db1232af04b92faa6c4a2a40df6371ea89ff"},{"url":"https://git.kernel.org/stable/c/8ca3bd404d076495ed0b274b65971c57b6fd5ac0"},{"url":"https://git.kernel.org/stable/c/f8e6fde5db87f855e99b200e392467274f0eb9d7"},{"url":"https://git.kernel.org/stable/c/10a6b99079697c5027b25352e882bdf54fef702a"},{"url":"https://git.kernel.org/stable/c/c5398ce6db7647b7004d73a3102ccc25fb4bb596"},{"url":"https://git.kernel.org/stable/c/e971d956353d382ee2185d71c47b538501a43f76"},{"url":"https://git.kernel.org/stable/c/be7dc3650f799a253df4edd4fe230fc9ea4be063"},{"url":"https://git.kernel.org/stable/c/2ded89ca77fae1da6886fe94831acfe4d6aa80b1"},{"url":"https://git.kernel.org/stable/c/965a251f23ff69cfb4486974d4532e9bb551c7fc"}],"tags":["cve.org"],"epss":0.00195,"epssPercentile":0.08587,"ingestedAt":"2026-10-19T09:16:01.508Z","slug":"CVE-2026-80814","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrndis_host: add overflow check in rndis_rx_fixup()\n\nAdd an overflow check to ensure that data_offset + data_len + 8 does not\nwrap, which would enable an OOB read of the USB data buffer.\n\n## Affected\n\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2140db1232af04b92faa6c4a2a40df6371ea89ff`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < f8e6fde5db87f855e99b200e392467274f0eb9d7`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 10a6b99079697c5027b25352e882bdf54fef702a`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < c5398ce6db7647b7004d73a3102ccc25fb4bb596`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < e971d956353d382ee2185d71c47b538501a43f76`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < be7dc3650f799a253df4edd4fe230fc9ea4be063`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1`\n- `Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 965a251f23ff69cfb4486974d4532e9bb551c7fc`\n- `Linux 2.6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}