CVE-2026-31640
Published: Apr 24, 2026
Modified: May 11, 2026
CVSS v3.1
7.5
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpc_post_response(), the code should be comparing the challenge serial number from the cached response before deciding to switch to a newer response, but looks at the newer packet private data instead, rendering the comparison always false. Fix this by switching to look at the older packet. Fix further[1] to substitute the new packet in place of the old one if newer and also to release whichever we don't use.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 5800b1cf3fd8ccab752a101865be1e76dac33142 - < 9132b1a7bf83b4a8042fffbc99d075b727a16742affected 5800b1cf3fd8ccab752a101865be1e76dac33142 - < 20386e7f8d97475b8d815873e246423317ec4260affected 5800b1cf3fd8ccab752a101865be1e76dac33142 - < b33f5741bb187db8ff32e8f5b96def77cc94dfca |
Linux | Linux | affected 6.16unaffected 0 - < 6.16unaffected 6.18.23 - <= 6.18.*unaffected 6.19.13 - <= 6.19.*unaffected 7.0 - <= * |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now