vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-46085

rxrpc: Fix rxkad crypto unalignment handling

HIGH
7.5
CVSS Score
Published: May 27, 2026 at 12:58 PM UTC
Updated: August 5, 2026 at 01:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.4%

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARN_ON_ONCE() so that it can't be remotely triggered (a trace line can still be emitted).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
v ≥ 6.19.136.12.82 ≤ v < 6.12.866.18.23 ≤ v < 6.18.276.19.13 ≤ v < 6.206.19.13 ≤ v < 7.06.6.135 ≤ v < 6.6.1407.0 ≤ v < 7.0.47.0 ≤ v < 7.17.0.1 ≤ v < 7.0.45cdf57eda01a1ffaeb61ac39ec4dcc94a690431e6.12.826.18.236.19.136.6.1357.09853917f9edf08efb0b55c26d9eb8340f126d9e9bf4d6e4a6856eedeb7f66eb91224115bfff4e2cbe9c369d58785044427450350ad32d6a2497fb379f93af41b9f5f798823d0d0fb8765c2a936d76270
Vendor states this is fixed in 440d20d95e844b657a93a0b2dcc2aae155efdce6 (fixed)
Vendor states this is fixed in af9271eb666d07b6f65612dc160a47f7cb5220ed (fixed)
Vendor states this is fixed in def304aae2edf321d2671fd6ca766a93c21f877e (fixed)
Vendor states this is fixed in f0d3efd03b2a9e0f1ffa6df8fcb264af3d494286 (fixed)
Vendor states this is fixed in f1c6bd0cc786a8fa74829ce3c4b3673944a308f4 (fixed)
Vendor states this is fixed in 6.12.86 (unaffected)
Vendor states this is fixed in 6.18.27 (unaffected)
Affected range stops below 6.20, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.6.140 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)
Vendor states this is fixed in 7.0.4 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (5)

Patch
Source: cverecord
https://git.kernel.org/stable/c/f1c6bd0cc786a8fa74829ce3c4b3673944a308f4
Patch
Source: cverecord
https://git.kernel.org/stable/c/440d20d95e844b657a93a0b2dcc2aae155efdce6
Patch
Source: cverecord
https://git.kernel.org/stable/c/f0d3efd03b2a9e0f1ffa6df8fcb264af3d494286
Patch
Source: cverecord
https://git.kernel.org/stable/c/af9271eb666d07b6f65612dc160a47f7cb5220ed
Patch
Source: cverecord
https://git.kernel.org/stable/c/def304aae2edf321d2671fd6ca766a93c21f877e

CVSS

7.5HIGHLinux
Vector?

Quick Info

StatusUNDERGOING ANALYSIS
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card