In the Linux kernel, the following vulnerability has been resolved:
net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
The same bounds-check bug fixed for NDP16 in the previous patch also exists in cdc_ncm_rx_verify_ndp32(). The DPE array size is validated against the total skb length without accounting for ndpoffset, allowing out-of-bounds reads when the NDP32 is placed near the end of the NTB.
Add ndpoffset to the nframes bounds check and use struct_size_t() to express the NDP-plus-DPE-array size more clearly.
Compile-tested only.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 3, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fde-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1062-azure-fde | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 4, 2026 | Apr 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub