CVE-2026-46010

HIGH

rxrpc: Fix error handling in rxgk_extract_token()

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgk_extract_token() Fix a missing bit of error handling in rxgk_extract_token(): in the event that rxgk_decrypt_skb() returns -ENOMEM, it should just return that rather than continuing on (for anything else, it generates an abort).

Scores

CVSS v3 8.1
EPSS 0.0040
EPSS Percentile 32.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (15)
linux/Kernel 6.17.0 - 6.18.27linux
linux/Kernel 6.19.0 - 7.0.4linux
Linux/Linux < 6.17
Linux/Linux 6.16.9 - 6.17
Linux/Linux 6.17
Linux/Linux 6.18.27 - 6.18.*
Linux/Linux 64863f4ca4945bdb62ce2b30823f39ea9fe95415 - 293095ef618818852bac5488c1bc223935e2ca17
Linux/Linux 64863f4ca4945bdb62ce2b30823f39ea9fe95415 - 3476c8bb960f48e49355d6f93fb7673211e0163f
Linux/Linux 64863f4ca4945bdb62ce2b30823f39ea9fe95415 - c52803e925604e2a17962ab0c99dce2d3f7238db
Linux/Linux 7.0.4 - 7.0.*
... and 5 more
Published May 27, 2026
Tracked Since May 27, 2026