Strix
26.1K

CVE-2026-64505

UnknownEPSS 0.22%

Last modified

CVE-2026-64505 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Metrics

EPSS Probability
0.22%

12.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 200dd5092296ad4d5ae47f8445a2fb1edd1da973; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 9ffd567d7bf269824dfac06f8ab9a32fef72699b; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < b73c0142e3acdc063b50c33afb7be19cdb2cd410; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < d6ef5af7d0fe1ac31e5653a77e6d775dd36bc433; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < ba2cc601e59fe68716646199a33303493513e2e3; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 7515a6d4a9e9e4838b833825882efa00e85f8901; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 9facd79028a7807879eb441d12f0e00720980aa3; >= 6cdee106e7571751ecc0e9f96606322f88b64a8d, < 21b5bf155435008e0fb0736795289788e63d426f
LinuxLinux2.6.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-64505?
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.
How severe is CVE-2026-64505?
Severity scoring for CVE-2026-64505 is pending analysis. The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2026-64505?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-64505?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST