Vulnerability in NetChip 1080 Devices Affects Linux Kernel Functionality

CVE-2026-64547

What is CVE-2026-64547?

A vulnerability exists in the Linux kernel's handling of packet length during the processing of data from NetChip 1080 devices. Specifically, the function handling RX frame adjustments does not properly validate the packet length before reading a pad byte at a potentially out-of-bounds memory address. This can be exploited by a malicious NetChip 1080 device sending intentionally malformed frames, leading to unsafe memory access and potential system instability. It is crucial to reject frames with packet lengths that exceed the actual data length to prevent this issue.

References