Vulnerability in Linux

CVE-2026-68366

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer uvc_send_response() builds the UVC control response from a user-supplied struct uvc_request_data: r…

Affected products

  • Linux — versions a5eaaa1f33e771fa1651a4a7652b8a5f9fa7f6c1, 3.10, 0

References