Vulnerability in Linux

CVE-2026-64351

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() kalmia_rx_fixup() computes usb_packet_length = skb->len - (2 * KALMIA_HEADER_LENGTH) as a u16, guarded only…

Affected products

  • Linux — versions d40261236e8e278cb1936cb5e934262971692b10, 3.0, 0

References