CVE-2026-64547

Summary (validated details): The CVE affects the Linux kernel USB net1080 driver (net1080_rx_fixup). A vulnerability allowed a pad-byte read at skb->data[packet_len] when packet_len is even, before the skb->len check, enabling a potential out-of-bounds read if a short frame advertises a lar...

CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...