CVE-2026-64101

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fwctl core where the pdsfc fw rpc() function casts an RPC input buffer to struct fwctl rpc pds and calls pdsfc validate rpc() without first verifying if the buffer size, defined by fwctl rpc.in len, is sufficient to hold the structure. This can lead to an out-of-bounds read when the input buffer is too short.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.