CVE-2026-31637

Katalog CVE

CVSS 9.8 · Critical EPSS 0,76%

Kerentanan pada linux kernel. Skor CVSS 3.1 9.8 (Critical) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticket() decrypts the RXKAD response ticket and then parses the buffer as plaintext without checking whether crypto_skcipher_decrypt() succeeded. A malformed RESPONSE can therefore use a non-block-aligned ticket length, make the decrypt operation fail, and still drive the ticket parser with attacker-controlled bytes. Check the decrypt result and abort the connection with RXKADBADTICKET when ticket decryption fails.

Rincian

Terbit di NVD

24 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 53,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/22f6258e7b31dba9bf88dce4e3ee7f0f20072e60 patch
• https://git.kernel.org/stable/c/47073aab8a3a5a7b41c9bd37d2a3dcbeeccd6c8a patch
• https://git.kernel.org/stable/c/58fcd1b156152613ba00a064a129fb69507ddd7d patch
• https://git.kernel.org/stable/c/a149dcae23309df9de1c3b6b5d468610ef5ab7de patch
• https://git.kernel.org/stable/c/fe4447cd95623b1cfacc15f280aab73a6d7340b2 patch
• https://git.kernel.org/stable/c/252157d939d179b5d767cb860ff8fa7f8723b67a
• https://git.kernel.org/stable/c/a75b3b361dd481d942c5f259a82d59718a41092c
• https://git.kernel.org/stable/c/b3a808cd0790b5075aaa2bc3588edf02cd71d352