CVE-2026-64571

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the p54 rx eeprom readback() function where the system copies a requested EEPROM slice from a device-supplied readback frame without verifying if the socket buffer (skb) contains sufficient bytes. A malicious USB device can send a truncated frame with an advertised length that matches the priv->eeprom slice size variable. This causes the memcpy() function to read beyond the end of the skb, resulting in a slab-out-of-bounds read that leaks adjacent heap memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.