CVE-2026-45988
BaseFortify
Publication date: 2026-05-27
Last updated on: 2026-05-27
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's rxrpc protocol implementation. When a RESPONSE packet encounters a temporary failure during processing, it may become partially decrypted and then be requeued for a retry. This improper handling could lead to issues in packet processing.
The fix involves discarding such partially decrypted RESPONSE packets instead of retrying them. The system then sends another CHALLENGE packet to elicit a fresh RESPONSE. Similarly, if an error occurs while generating a RESPONSE to an incoming CHALLENGE packet, that CHALLENGE packet is discarded, prompting the server to send another CHALLENGE.
How can this vulnerability impact me? :
If this vulnerability is exploited or triggered, it could cause improper handling of network packets within the rxrpc protocol in the Linux kernel. This might lead to communication disruptions or unexpected behavior in applications relying on this protocol.
However, the vulnerability is addressed by discarding problematic packets and prompting retries, which helps maintain protocol integrity and prevents potential issues caused by partially decrypted packets.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that your Linux kernel is updated to a version where the rxrpc re-decryption issue has been fixed. The fix involves discarding partially decrypted RESPONSE packets and handling CHALLENGE packets correctly to avoid retries that could lead to inconsistent states.
Since the vulnerability is resolved by a kernel patch, applying the latest kernel updates from your Linux distribution is the immediate recommended step.