Out-of-Bounds Read Vulnerability in GeneLink GL620A Device by Linux Kernel

CVE-2026-64540

What is CVE-2026-64540?

The vulnerability in the Linux kernel affects the GeneLink GL620A device due to an out-of-bounds read caused by improper handling of incoming network packets. The function genelink_rx_fixup() fails to properly check the actual length of received data against the expected packet length, allowing malicious devices to craft packets that can lead to reading beyond allocated memory boundaries. This flaw may expose sensitive data from the kernel heap without requiring elevated privileges, posing significant security risks to affected systems. Well-formed frames are not impacted, but malformed packets can lead to unstable behavior and potential data leaks.

References