Riskcovery

CVE-2026-31631

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

State
Published
Severity
8.2 High
Published
Apr 24, 2026
Updated
Oct 19, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before 794586789800b16dcbe235452494f4223ac80413Affected
  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before 1c4422d8be81718ecb15d79aedff607323085201Affected
  • 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before f564af387c8c28238f8ebc13314c589d7ba8475dAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.23 through 6.18.*Not affected
  • 6.19.13 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.