PT-2026-61418 · Linux · Linux

CVE-2026-64101 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

fwctl: pds: Validate RPC input size before parsing

The fwctl core allocates the device-specific RPC input buffer with fwctl rpc.in len and passes that buffer to the driver callback.

pdsfc fw rpc() casts the buffer to struct fwctl rpc pds and then calls pdsfc validate rpc(), which reads fields from that structure before checking that the input buffer is large enough to contain it. A short in len can make pds fwctl read beyond the allocation.

Reject pds RPC buffers that are smaller than struct fwctl rpc pds before parsing any pds-specific fields.

Identificadores relacionados

CVE-2026-64101

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/0d470d36551058e3f728574308b815a80bca710f · Nota
• https://git.kernel.org/stable/c/9e3f18883a98420a3b8873c6f894bc57e9b98e41 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64101 · Nota de Segurança
• https://git.kernel.org/stable/c/e7537735028c3ad4b0bfc02ff8fa2a1a28aa04fe · Nota