CVE-2026-80814

    Dashboard / Vulnerabilities / CVE-2026-80814

    CVE-2026-80814

    Published: 4 Sept 2026Last Modified: 15 Sept 2026

    Summary: rndis_host: add overflow check in rndis_rx_fixup()

    Details: In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow check to ensure that data_offset + data_len + 8 does not wrap, which would enable an OOB read of the USB data buffer.

    References: https://git.kernel.org/stable/c/10a6b99079697c5027b25352e882bdf54fef702a, https://git.kernel.org/stable/c/2140db1232af04b92faa6c4a2a40df6371ea89ff, https://git.kernel.org/stable/c/2ded89ca77fae1da6886fe94831acfe4d6aa80b1, https://git.kernel.org/stable/c/8ca3bd404d076495ed0b274b65971c57b6fd5ac0, https://git.kernel.org/stable/c/965a251f23ff69cfb4486974d4532e9bb551c7fc, https://git.kernel.org/stable/c/be7dc3650f799a253df4edd4fe230fc9ea4be063, https://git.kernel.org/stable/c/c5398ce6db7647b7004d73a3102ccc25fb4bb596, https://git.kernel.org/stable/c/e971d956353d382ee2185d71c47b538501a43f76, https://git.kernel.org/stable/c/f8e6fde5db87f855e99b200e392467274f0eb9d7, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80814.json, https://nvd.nist.gov/vuln/detail/CVE-2026-80814, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 64e049102d3de3e61409cb6019403a9e689dfda6
    Fixed -2140db1232af04b92faa6c4a2a40df6371ea89ff

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-80814 | CVE-DB