In rndisqueryoid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
{ "urgency": "not yet assigned" }