CVE-2026-80814None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ensure that data_offset + data_len + 8 does not wrap, which would enable an OOB read of the…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
rndis_host: add overflow check in rndis_rx_fixup()
Add an overflow check to ensure that data_offset + data_len + 8 does not wrap, which would enable an OOB read of the USB data buffer.
Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2140db1232af04b92faa6c4a2a40df6371ea89ffLinux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < f8e6fde5db87f855e99b200e392467274f0eb9d7Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 10a6b99079697c5027b25352e882bdf54fef702aLinux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < c5398ce6db7647b7004d73a3102ccc25fb4bb596Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < e971d956353d382ee2185d71c47b538501a43f76Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < be7dc3650f799a253df4edd4fe230fc9ea4be063Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1Linux >= 64e049102d3de3e61409cb6019403a9e689dfda6 < 965a251f23ff69cfb4486974d4532e9bb551c7fcLinux 2.6.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device