Vulnerability in Linux Kernel Affecting Qualcomm's rmnet Module

CVE-2026-64550

What is CVE-2026-64550?

A vulnerability exists in the Linux kernel related to Qualcomm's rmnet module, where the length validation of MAP frames is bypassed during ingress parsing. When ingress deaggregation is disabled, the handling mechanism fails to check the packet length before processing, which can lead to out-of-bound reads. This issue is highlighted by a KASAN error indicating slab-out-of-bounds access, potentially allowing an attacker to exploit this flaw. It is crucial to apply patches that address this vulnerability to secure the kernel and prevent unauthorized access or data corruption.

References