What is CVE-2026-64505?

CVE-2026-64505 is a unscored severity Linux kernel vulnerability. CVE-2026-64505 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64505?

CVE-2026-64505 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-64505?

Yes, CVE-2026-64505 has been patched. Fixed versions include 5.10.261, 5.15.212, 6.1.178 and others.

Is CVE-2026-64505 actively exploited?

CVE-2026-64505 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64505

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndis_rm_hdr, to ensure that MessageType, MessageLength, DataOffset, and DataLength fields are present before they are accessed.

Package Linux Kernel

Published 2026-07-25

Last modified 2026-07-25

Patch available

Yes

Affected versions

Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4, 7.2-rc3 and their respective stable series.

Fixed in

✓ 5.10.261 5.10.x ✓ 5.15.212 5.15.x ✓ 6.1.178 6.1.x ✓ 6.6.145 6.6.x ✓ 6.12.96 6.12.x ✓ 6.18.39 6.18.x ✓ 7.1.4 7.1.x ✓ 7.2-rc3

References

8 total

Showing 5 of 8 references View all on NVD

Frequently asked questions

What is CVE-2026-64505?

CVE-2026-64505 is a unscored severity Linux kernel vulnerability . CVE-2026-64505 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-64505?

Yes. CVE-2026-64505 has been patched. Fixed versions include 5.10.261, 5.15.212, 6.1.178 and others.
Is CVE-2026-64505 actively exploited?

No. CVE-2026-64505 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.