Riskcovery

CVE-2026-46010

rxrpc: Fix error handling in rxgk_extract_token()

State
Published
Severity
8.1 High
Published
May 27, 2026
Updated
Aug 5, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix error handling in rxgk_extract_token()

Fix a missing bit of error handling in rxgk_extract_token(): in the event that rxgk_decrypt_skb() returns -ENOMEM, it should just return that rather than continuing on (for anything else, it generates an abort).

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 64863f4ca4945bdb62ce2b30823f39ea9fe95415 to before 293095ef618818852bac5488c1bc223935e2ca17Affected
  • 64863f4ca4945bdb62ce2b30823f39ea9fe95415 to before c52803e925604e2a17962ab0c99dce2d3f7238dbAffected
  • 64863f4ca4945bdb62ce2b30823f39ea9fe95415 to before 3476c8bb960f48e49355d6f93fb7673211e0163fAffected
  • 8ac99c57029e13ebb5fb0d634925abedef32b53aAffected
  • 6.16.9 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.