Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-31631

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to < 794586789800b16dcbe235452494f4223ac80413affected
  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to < 1c4422d8be81718ecb15d79aedff607323085201affected
  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to < f564af387c8c28238f8ebc13314c589d7ba8475daffected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.23 to ≤ 6.18.*unaffected
  • 6.19.13 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References