CVE-2026-64101
Received Received - Intake

Buffer Overflow in Linux Kernel fwctl pds Component

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-specific RPC input buffer with fwctl_rpc.in_len and passes that buffer to the driver callback. pdsfc_fw_rpc() casts the buffer to struct fwctl_rpc_pds and then calls pdsfc_validate_rpc(), which reads fields from that structure before checking that the input buffer is large enough to contain it. A short in_len can make pds_fwctl read beyond the allocation. Reject pds RPC buffers that are smaller than struct fwctl_rpc_pds before parsing any pds-specific fields.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64101
EUVD
EUVD-2026-45786

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
fwctl fwctl *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel where the fwctl core allocates an RPC input buffer but does not validate its size before parsing. The pdsfc_fw_rpc function casts the buffer to a structure and reads fields without checking if the buffer is large enough, potentially causing out-of-bounds reads.

Detection Guidance

This vulnerability is specific to the Linux kernel's fwctl subsystem and requires kernel-level inspection. Detection involves checking kernel logs for fwctl-related errors or crashes, particularly after RPC operations. Commands like dmesg | grep fwctl or journalctl -k | grep fwctl may reveal issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

This vulnerability could allow an attacker to read beyond allocated memory, leading to crashes, data leaks, or privilege escalation. Systems using affected Linux kernel versions with fwctl and pds drivers are at risk.

Compliance Impact

This vulnerability involves improper input validation in the Linux kernel's fwctl component, which could lead to out-of-bounds memory access. While it does not directly impact compliance with standards like GDPR or HIPAA, such vulnerabilities may compromise system integrity, potentially affecting data confidentiality and availability required by these regulations.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-64101. Avoid using vulnerable fwctl RPC interfaces until patched. Monitor kernel logs for suspicious activity related to fwctl or pdsfc modules.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64101. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart