CVE-2026-68088
Detail
Received
This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: function: rndis: add length check to response query
Add variable representations for BufLength and BufOffset in
rndis_query_response(), and perform a length check on them.
This is identical to how rndis_set_response() handles these parameters.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
Change History
3 change records found show changes
CVE Modified by kernel.org
8/17/2026 1:18:07 AM
Action
Type
Old Value
New Value
Changed
Affected
Record truncated, showing 2048 of 2490 characters.
View Entire Change Record
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"bb2b4402b4571b0c989b977779f7be01107ca425","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"585921866d2d7d65d4b0d89927c78f784668cf5f","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"caea8b120604312bab2bfeb1a972f9cd17019e93","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"f5870777458d8be65d7cd08bc750a03f17998350","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"e01e7814b4223560eab0513b7c15b8c82bdc83f3","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"b09716040f3fa4a252eeda3ceb5295ea0e39c1fb","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"95f90eea070837f7c72207d5520f805bdefc3bc5","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.13","status":"affected"},{"version":"0","lessThan":"2.6.13","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual"
Record truncated, showing 2048 of 2486 characters.
View Entire Change Record
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"bb2b4402b4571b0c989b977779f7be01107ca425","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"585921866d2d7d65d4b0d89927c78f784668cf5f","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"caea8b120604312bab2bfeb1a972f9cd17019e93","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"f5870777458d8be65d7cd08bc750a03f17998350","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"e01e7814b4223560eab0513b7c15b8c82bdc83f3","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"b09716040f3fa4a252eeda3ceb5295ea0e39c1fb","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"95f90eea070837f7c72207d5520f805bdefc3bc5","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.13","status":"affected"},{"version":"0","lessThan":"2.6.13","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual"
CVE Modified by kernel.org
8/12/2026 8:17:33 PM
Action
Type
Old Value
New Value
Changed
Affected
Record truncated, showing 2048 of 2928 characters.
View Entire Change Record
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"bb2b4402b4571b0c989b977779f7be01107ca425","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"585921866d2d7d65d4b0d89927c78f784668cf5f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"caea8b120604312bab2bfeb1a972f9cd17019e93","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"f5870777458d8be65d7cd08bc750a03f17998350","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"e01e7814b4223560eab0513b7c15b8c82bdc83f3","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"b09716040f3fa4a252eeda3ceb5295ea0e39c1fb","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"95f90eea070837f7c72207d5520f805bdefc3bc5","versionType":"git","status":"affected"},{"version":"0","lessThan":"5.10.261","versionType":"semver","status":"affected"},{"version":"0","lessThan":"5.15.212","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.1.178","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.6.145","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.96","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.39","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers
Record truncated, showing 2048 of 2490 characters.
View Entire Change Record
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"bb2b4402b4571b0c989b977779f7be01107ca425","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"585921866d2d7d65d4b0d89927c78f784668cf5f","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"caea8b120604312bab2bfeb1a972f9cd17019e93","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"f5870777458d8be65d7cd08bc750a03f17998350","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"e01e7814b4223560eab0513b7c15b8c82bdc83f3","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"b09716040f3fa4a252eeda3ceb5295ea0e39c1fb","versionType":"git","status":"affected"},{"version":"340600ab4cf0cc41efd01a65af97ebb7d35a7f85","lessThan":"95f90eea070837f7c72207d5520f805bdefc3bc5","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.13","status":"affected"},{"version":"0","lessThan":"2.6.13","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual"
New CVE Received from kernel.org
8/10/2026 8:17:21 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: function: rndis: add length check to response query
Add variable representations for BufLength and BufOffset in
rndis_query_response(), and perform a length check on them.
This is identical to how rndis_set_response() handles these parameters.
Added
Reference
https://git.kernel.org/stable/c/585921866d2d7d65d4b0d89927c78f784668cf5f
Added
Reference
https://git.kernel.org/stable/c/95f90eea070837f7c72207d5520f805bdefc3bc5
Added
Reference
https://git.kernel.org/stable/c/b09716040f3fa4a252eeda3ceb5295ea0e39c1fb
Added
Reference
https://git.kernel.org/stable/c/bb2b4402b4571b0c989b977779f7be01107ca425
Added
Reference
https://git.kernel.org/stable/c/caea8b120604312bab2bfeb1a972f9cd17019e93
Added
Reference
https://git.kernel.org/stable/c/e01e7814b4223560eab0513b7c15b8c82bdc83f3
Added
Reference
https://git.kernel.org/stable/c/efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e
Added
Reference
https://git.kernel.org/stable/c/f5870777458d8be65d7cd08bc750a03f17998350
Added
Affected
Record truncated, showing 2048 of 2928 characters.
View Entire Change Record
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/rndis.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"efcf4e4eeea0d69d8da72a7bc5cbd49b6192260e","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"bb2b4402b4571b0c989b977779f7be01107ca425","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"585921866d2d7d65d4b0d89927c78f784668cf5f","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"caea8b120604312bab2bfeb1a972f9cd17019e93","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"f5870777458d8be65d7cd08bc750a03f17998350","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"e01e7814b4223560eab0513b7c15b8c82bdc83f3","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"b09716040f3fa4a252eeda3ceb5295ea0e39c1fb","versionType":"git","status":"affected"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"95f90eea070837f7c72207d5520f805bdefc3bc5","versionType":"git","status":"affected"},{"version":"0","lessThan":"5.10.261","versionType":"semver","status":"affected"},{"version":"0","lessThan":"5.15.212","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.1.178","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.6.145","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.12.96","versionType":"semver","status":"affected"},{"version":"0","lessThan":"6.18.39","versionType":"semver","status":"affected"},{"version":"0","lessThan":"7.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers
Quick Info
CVE Dictionary Entry: CVE-2026-68088 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/17/2026
Source: kernel.org