Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64540

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() genelink_rx_fixup() splits an aggregated RX frame into its individual packets, using a per-packet length taken from device-supplied data. That length is only bounded by GL_MAX_PACKET_LEN (1514); it is never compared against how many bytes were actually received. A malicious GeneLink (GL620A) device can therefore send a short URB whose header claims packet_count > 1
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4afa0c6604c56d5d604ee66f26331ce5dc0cdf156aa285b67f96527fb518000a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/gl620a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"255d03551f94c7bdd86c7d9181a70b21917d829f","status":"affected","version":"47ee3051c856cc2aa95d35d577a8cb37279d540f","versionType":"git"},{"lessThan":"4359376e6238d89977a35086e47ca3b07f43e850","status":"affected","version":"47ee3051c856cc2aa95d35d577a8cb37279d540f","versionType":"git"},{"lessThan":"8624e179fa3ce23c2fbd1a198ce30764b73f054a","status":"affected","version":"47ee3051c856cc2aa95d3…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/gl620a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.14"},{"lessThan":"2.6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/gl620a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"255d03551f94c7bdd86c7d9181a70b21917d829f","status":"affected","version":"47ee3051c856cc2aa95d35d577a8cb37279d540f","versionType":"git"},{"lessThan":"4359376e6238d89977a35086e47ca3b07f43e850","status":"affected","version":"47ee3051c856cc2aa95d35d577a8cb37279d540f","versionType":"git"},{"lessThan":"8624e179fa3ce23c2fbd1a198ce30764b73f054a","status":"affected","version":"47ee3051c856cc2aa95d3…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/gl620a.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.14"},{"lessThan":"2.6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0575599e451aff3c5329922562374a2cab25fc51"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/0a7d9c7c5f1f208c523abbb4db6aea7bc1fad3db"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/255d03551f94c7bdd86c7d9181a70b21917d829f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/3ef79fa3860e644c8de7834fa7300e1c58f38862"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/4359376e6238d89977a35086e47ca3b07f43e850"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/573418f7ea8f859a841417eb4b915594094fd967"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8624e179fa3ce23c2fbd1a198ce30764b73f054a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/8ff7f2a6da4fccaa5cc9be7251a24e71e29fbd1a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:099c567b42534febb212425dd8137d2b3392683b414a94dc83f573fc6af9af8e · sha256:16907fabc2fb7e7f… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer