CVE-2026-64550 net: qualcomm: rmnet: validate MAP frame length before ingress parsing

🗓️ 27 Jul 2026 20:10:39Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

CVE-2026-64550 fixes RMNET ingress MAP length validation on non-aggregated packets to avoid out-of-bounds reads.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2026-64550	27 Jul 202620:10	–	cve
Cvelist	CVE-2026-64550 net: qualcomm: rmnet: validate MAP frame length before ingress parsing	27 Jul 202620:10	–	cvelist
Debian CVE	CVE-2026-64550	27 Jul 202620:10	–	debiancve
EUVD	EUVD-2026-49601	27 Jul 202620:10	–	euvd
NVD	CVE-2026-64550	27 Jul 202621:17	–	nvd
OSV	DEBIAN-CVE-2026-64550	27 Jul 202621:17	–	osv
OSV	UBUNTU-CVE-2026-64550	28 Jul 202600:00	–	osv
Positive Technologies	PT-2026-65225	27 Jul 202600:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/00f4c366dbca16a40772c3b7ec2d8cba839e9724
git	www.git.kernel.org/stable/c/14eb0c9491385d5361a292ea4974aec0e6887299
git	www.git.kernel.org/stable/c/1b12612c367e4be9b0814c0468e7e687835315b4
git	www.git.kernel.org/stable/c/231a8a4b76cb1b1827b3b19d7b3603642f5aaaef
git	www.git.kernel.org/stable/c/3868c3244369ab709a90c9aad7534d406009b824
git	www.git.kernel.org/stable/c/a54d76d176e50d2fdbd39b7231efe256170339e4
git	www.git.kernel.org/stable/c/ed25befc8c36f896b5878f9078faddb67fd7e2d0
git	www.git.kernel.org/stable/c/f0f1887a9e30712a1df03e152dce6fb91344b1f3
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64550.json

28 Jul 2026 04:02Current

5.8Medium risk

Vulners AI Score5.8

linux kernel qualcomm rmnet map header frame length ingress path bounds check