CVE-2015-3036: Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel,...

Security readout for executives and security teams

CVE-2015-3036 is a remote code execution flaw in KCodes NetUSB, a kernel module embedded in some router products. A long computer name sent to the NetUSB service on TCP port 20005 can overflow memory. Compromise could give an attacker deep control of an affected network device. Exposure is most likely in network devices that include KCodes NetUSB, including certain NETGEAR and TP-LINK products, especially where TCP port 20005 is reachable from untrusted networks. The bundle does not provide a complete affected-product matrix. Treat this as high-priority for perimeter and branch network devices. The issue enables remote code execution in kernel-level device software, and public exploit references exist. Prioritize internet-facing or guest-reachable devices first. Mitigation focus: Identify devices using KCodes NetUSB or USB-over-network sharing features.; Check vendor guidance and apply applicable firmware updates.; Disable NetUSB or USB sharing where it is not required..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.