CVE Database
/

CVE-2026-46010

Back to search

CVE-2026-46010

Published: May 27, 2026

Modified: May 30, 2026

PUBLISHED

CVSS v3.1

8.1

HIGH

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgk_extract_token() Fix a missing bit of error handling in rxgk_extract_token(): in the event that rxgk_decrypt_skb() returns -ENOMEM, it should just return that rather than continuing on (for anything else, it generates an abort).

VendorProductVersions

Linux

Linux

affected
64863f4ca4945bdb62ce2b30823f39ea9fe95415 - < 293095ef618818852bac5488c1bc223935e2ca17
affected
64863f4ca4945bdb62ce2b30823f39ea9fe95415 - < c52803e925604e2a17962ab0c99dce2d3f7238db
affected
64863f4ca4945bdb62ce2b30823f39ea9fe95415 - < 3476c8bb960f48e49355d6f93fb7673211e0163f
affected
8ac99c57029e13ebb5fb0d634925abedef32b53a
affected
6.16.9 - < 6.17

Linux

Linux

affected
6.17
unaffected
0 - < 6.17
unaffected
6.18.27 - <= 6.18.*
unaffected
7.0.4 - <= 7.0.*
unaffected
7.1-rc1 - <= *

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now