CVE-2026-64101

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> fwctl: pds: Validate RPC input size before parsing<br /> <br /> The fwctl core allocates the device-specific RPC input buffer with<br /> fwctl_rpc.in_len and passes that buffer to the driver callback.<br /> <br /> pdsfc_fw_rpc() casts the buffer to struct fwctl_rpc_pds and then calls<br /> pdsfc_validate_rpc(), which reads fields from that structure before<br /> checking that the input buffer is large enough to contain it. A short<br /> in_len can make pds_fwctl read beyond the allocation.<br /> <br /> Reject pds RPC buffers that are smaller than struct fwctl_rpc_pds before<br /> parsing any pds-specific fields.