← Back

CVE-2026-31631

nvd nist
Published: Apr 24, 2026Modified: Oct 19, 2026

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Exploitability: 3.9 / Impact: 4.2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.

Affected (10)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
6.16.1 ≤ version < 6.18.23
Linux Kernel
6.19 ≤ version < 6.19.13
Linux Kernel
Version 6.16
Linux Kernel
Version 7.0 rc1
Linux Kernel
Version 7.0 rc2
Linux Kernel
Version 7.0 rc3
Linux Kernel
Version 7.0 rc4
Linux Kernel
Version 7.0 rc5
Linux Kernel
Version 7.0 rc6
Linux Kernel
Version 7.0 rc7

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.