CVE-2026-64540

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the genelink rx fixup() function within the usbnet driver for GeneLink (GL620A) devices. The function splits aggregated RX frames into individual packets using a length provided by the device. Because this length is only bounded by GL MAX PACKET LEN and not compared against the actual number of bytes received, a malicious device can send a short USB Request Block (URB) with a header claiming multiple packets. This causes the skb put data() function to copy data beyond the end of the receive buffer, leaking kernel heap contents into the network stack. This issue can be triggered without any special privileges as soon as the interface is active.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.