CVEvulnerability

CVE-2026-31631

8.2 HIGH Published 2026-04-24 Modified 2026-10-19 Official page ↗

Status: Modified
Published: 2026-04-24
Last modified: 2026-10-19
Assigner: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67): 8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weaknesses: CWE-125, CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.

Affected configurations

• linux linux kernel (>= 6.16.1 < 6.18.23) • linux linux kernel (>= 6.19 < 6.19.13) • linux linux kernel 6.16 • linux linux kernel 7.0

Weakness · CWE (2)

CWE-125 Out-of-bounds Read weakness
CWE-787 Out-of-bounds Write weakness

References

https://git.kernel.org/stable/c/1c4422d8be81718ecb15d79aedff607323085201 Patch
https://git.kernel.org/stable/c/794586789800b16dcbe235452494f4223ac80413 Patch
https://git.kernel.org/stable/c/f564af387c8c28238f8ebc13314c589d7ba8475d Patch

CVE-2026-31631

Description

Affected configurations

Related

Weakness · CWE (2)

References