CVE-2026-80814

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1

Description An issue exists in the rndis host component where the rndis rx fixup() function lacks a proper overflow check. This allows the sum of data offset, data len, and 8 to wrap, potentially leading to an Out-of-Bounds (OOB) read of the USB data buffer. An OOB read occurs when the software reads data outside the intended boundary of a buffer.

Recommendations Update to version 7.2.5-1.1.