CVE-2026-68088 — usb: gadget: function: rndis: add length check to response query
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength…
Published: 2026-08-10 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them. This is identical to how rndis_set_response() handles these parameters.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7