01 Record

CVE-2026-80814

rndis_host: add overflow check in rndis_rx_fixup()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

rndis_host: add overflow check in rndis_rx_fixup()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-09-04 15:13Z1 MO AGO
Last updated: 2026-10-19 08:44Z10 DAYS AGO
Reserved: 2026-08-26
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: aa1aff2fe0f19aba97c9a71d24b8976bd034f68258008714be6ac62b1983ab3f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux64e049102d3de3e61409cb6019403a9e689dfda6 to < 2140db1232af04b92faa6c4a2a40df6371ea89ff, 64e049102d3de3e61409cb6019403a9e689dfda6 to < 8ca3bd404d076495ed0b274b65971c57b6fd5ac0, 64e049102d3de3e61409cb6019403a9e689dfda6 to < f8e6fde5db87f855e99b200e392467274f0eb9d7, 64e049102d3de3e61409cb6019403a9e689dfda6 to < 10a6b99079697c5027b25352e882bdf54fef702a, 64e049102d3de3e61409cb6019403a9e689dfda6 to < c5398ce6db7647b7004d73a3102ccc25fb4bb596, 64e049102d3de3e61409cb6019403a9e689dfda6 to < e971d956353d382ee2185d71c47b538501a43f76, 64e049102d3de3e61409cb6019403a9e689dfda6 to < be7dc3650f799a253df4edd4fe230fc9ea4be063, 64e049102d3de3e61409cb6019403a9e689dfda6 to < 2ded89ca77fae1da6886fe94831acfe4d6aa80b1, 64e049102d3de3e61409cb6019403a9e689dfda6 to < 965a251f23ff69cfb4486974d4532e9bb551c7fc, 2.6.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2140db1232af04b92faa6c4a2a40df6371ea89ff
git.kernel.orghttps://git.kernel.org/stable/c/8ca3bd404d076495ed0b274b65971c57b6fd5ac0
git.kernel.orghttps://git.kernel.org/stable/c/f8e6fde5db87f855e99b200e392467274f0eb9d7
git.kernel.orghttps://git.kernel.org/stable/c/10a6b99079697c5027b25352e882bdf54fef702a
git.kernel.orghttps://git.kernel.org/stable/c/c5398ce6db7647b7004d73a3102ccc25fb4bb596
git.kernel.orghttps://git.kernel.org/stable/c/e971d956353d382ee2185d71c47b538501a43f76
git.kernel.orghttps://git.kernel.org/stable/c/be7dc3650f799a253df4edd4fe230fc9ea4be063
git.kernel.orghttps://git.kernel.org/stable/c/2ded89ca77fae1da6886fe94831acfe4d6aa80b1
git.kernel.orghttps://git.kernel.org/stable/c/965a251f23ff69cfb4486974d4532e9bb551c7fc

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.107-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.