Executive Summary

This vulnerability is in the Linux kernel's rxrpc component, specifically in the function rxgk_extract_token(). The issue was a missing piece of error handling: when the function rxgk_decrypt_skb() returns an -ENOMEM error (indicating an out-of-memory condition), rxgk_extract_token() should return that error immediately instead of continuing execution. For other errors, the function generates an abort, but this specific case was not handled correctly.

Useful 0 Not Useful 0

Impact Analysis

If the error handling in rxgk_extract_token() is incorrect, it could lead to improper processing of tokens when an out-of-memory error occurs. This might cause unexpected behavior or instability in the kernel's rxrpc subsystem, potentially leading to crashes or denial of service conditions.

Useful 0 Not Useful 0