Microsoft Security Response Center guidance
Vendor revision: Aug 14, 2026CBL-Mariner Releases
Vendor-listed releases
- 6.6.150.1-1
Vulnerability intelligence
CVE-2026-68088. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
Vendor-listed releases
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: function: rndis: add length check to response query
Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them.
This is identical to how rndis_set_response() handles these parameters.
Source: NVD