CVE-2026-68088
Last modified
CVE-2026-68088 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them. This is identical to how rndis_set_response() handles these parameters..
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them. This is identical to how rndis_set_response() handles these parameters.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < bb2b4402b4571b0c989b977779f7be01107ca425; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 585921866d2d7d65d4b0d89927c78f784668cf5f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < caea8b120604312bab2bfeb1a972f9cd17019e93; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f5870777458d8be65d7cd08bc750a03f17998350; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e01e7814b4223560eab0513b7c15b8c82bdc83f3; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b09716040f3fa4a252eeda3ceb5295ea0e39c1fb; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 95f90eea070837f7c72207d5520f805bdefc3bc5; < 5.10.261; < 5.15.212; < 6.1.178; < 6.6.145; < 6.12.96; < 6.18.39; < 7.1.4 |
| Linux | Linux | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68088?
How severe is CVE-2026-68088?
How do I fix CVE-2026-68088?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68082In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68083In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68084In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68085In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68086In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68087In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68089In the Linux kernel, the following vulnerability has been re…
- CVE-2026-6809The Social Post Embed plugin for WordPress is vulnerable to …6.4
- CVE-2026-68090In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68091In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68092In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68093In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-68088?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST