rxrpc: Fix rxkad crypto unalignment handling in Linux Kernel

Publication date: 2026-05-27

Last updated on: 2026-06-24

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARN_ON_ONCE() so that it can't be remotely triggered (a trace line can still be emitted).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-24

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-46085

EUVD

EUVD-2026-32468

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	From 6.12.82 (inc) to 6.12.86 (exc)
linux	linux_kernel	From 6.18.23 (inc) to 6.18.27 (exc)
linux	linux_kernel	From 6.19.13 (inc) to 7.0 (exc)
linux	linux_kernel	From 6.6.135 (inc) to 6.6.140 (exc)
linux	linux_kernel	From 7.0.1 (inc) to 7.0.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability relates to the Linux kernel's rxrpc component, specifically in the rxkad cryptographic handling. It involves improper handling of packets with misaligned crypto length, which could cause issues during decryption. The fix addresses the handling of such misaligned packets and ensures that non-memory error (non-ENOMEM) decryption errors cause the process to abort. Additionally, a warning that could be triggered remotely has been removed to prevent potential remote triggering.

Impact Analysis

Improper handling of misaligned crypto packets and errors during decryption could potentially lead to unexpected behavior or crashes in the Linux kernel's rxrpc subsystem. This might affect system stability or security by allowing an attacker to remotely trigger warnings or cause abnormal termination of processes handling encrypted packets.

Hi! I’m here to help you understand CVE-2026-46085. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70