PT-2026-61418 · Linux · Linux
CVE-2026-64101
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
fwctl: pds: Validate RPC input size before parsing
The fwctl core allocates the device-specific RPC input buffer with
fwctl rpc.in len and passes that buffer to the driver callback.
pdsfc fw rpc() casts the buffer to struct fwctl rpc pds and then calls
pdsfc validate rpc(), which reads fields from that structure before
checking that the input buffer is large enough to contain it. A short
in len can make pds fwctl read beyond the allocation.
Reject pds RPC buffers that are smaller than struct fwctl rpc pds before
parsing any pds-specific fields.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux