CVE-2026-64547

Received Received - Intake

Buffer Overflow in Linux Kernel Net1080 USB Driver

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup For an even packet_len, net1080_rx_fixup() reads the pad byte at skb->data[packet_len] before the skb->len != packet_len check further down, and packet_len is only bounded against NC_MAX_PACKET. A malicious NetChip 1080 device can send a short frame advertising a large even packet_len (e.g. 0x4000), so the pad-byte read lands past the end of the skb: BUG: KASAN: slab-out-of-bounds in net1080_rx_fixup Read of size 1 at addr ffff8880106c83c6 by task ksoftirqd/0/14 ... net1080_rx_fixup (drivers/net/usb/net1080.c:384) usbnet_bh (drivers/net/usb/usbnet.c:1589) process_one_work (kernel/workqueue.c:3322) bh_worker (kernel/workqueue.c:3708) tasklet_action (kernel/softirq.c:965) handle_softirqs (kernel/softirq.c:622) ... Reject the frame when packet_len >= skb->len before reading.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-27

Generated

2026-07-28

AI Q&A

2026-07-28

EPSS Evaluated

N/A

NVD

CVE-2026-64547

EUVD

EUVD-2026-49598

Affected Vendors & Products

Vendor	Product	Version / Range
netchip	net1080	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the net1080 USB network driver. A malicious NetChip 1080 device can send a short network frame with a large even packet length value. The driver incorrectly reads a padding byte beyond the actual data buffer, causing a slab-out-of-bounds memory access error.

Detection Guidance

This vulnerability may cause slab-out-of-bounds errors in the kernel. Check kernel logs for KASAN errors with commands like dmesg | grep -i kasan or journalctl -k | grep -i kasan. Monitor for crashes in usbnet or net1080 drivers.

Impact Analysis

This could lead to kernel memory corruption, crashes, or potential privilege escalation if exploited. Systems using affected Linux kernels with USB network devices may experience instability or security breaches.

Mitigation Strategies

Apply the Linux kernel patch that fixes the net1080_rx_fixup function. Disable the net1080 driver if not in use. Monitor network devices for unusual behavior or crashes.

Hi! I’m here to help you understand CVE-2026-64547. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70