CVE-2026-64540

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated RX frame into its individual packets, using a per-packet length taken from device-supplied data. That length is only bounded by...

EUVD-2026-49591

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated RX frame into its individual packets, using a per-packet length taken from device-supplied data. That length is only bounded by...

CVE-2026-64540

The CVE-2026-64540 entry documents a Linux kernel issue in usbnet for GL620A: genelink_rx_fixup() did not validate per-packet lengths against received data when splitting aggregated RX frames, allowing an out-of-bounds read and kernel heap leakage. The vulnerability can be exploited by a maliciou...