CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...

The vulnerability of the rxgk_do_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality and accessibility of protected information, as it supports session sockets in the Linux operating system’s kernel.

The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

CVE-2026-74433

In the Linux kernel, CVE-2026-74433 describes a use-after-free (UAF) in rxgk_issue_challenge() within rxrpc. The bug occurs because a page containing the challenge content is freed after a tracepoint is invoked, while the whdr referenced by the tracepoint points into that same page. The fix updat...

CVE-2026-74433

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

CVE-2026-74433 rxrpc: Fix UAF in rxgk_issue_challenge()

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

EUVD-2026-59580

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

CVE-2026-74433 rxrpc: Fix UAF in rxgk_issue_challenge()

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

Oracle Linux 10 : kernel (ELSA-2026-47017)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47017 advisory. - ipv6: fix possible UAF in icmpv6rcv CKI Backport Bot RHEL-192215 CVE-2026-53006 - tipc: fix double-free in tipcbufappend CKI Backport Bot RHEL-1921...

PT-2026-64323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The krb5 crypto library lacks facilities to precheck the length of messages before they are decrypted or verified. This issue affects AF RXRPC when validating DATA packets secured with...

CVE-2026-64208: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AFRXRPC to make use of this to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed error handling in rxgkextracttoken. Fixed a missing piece of error handling in rxgkextracttoken: in the case where rxgkdecryptskb returns -ENOMEM, it should simply return that value instead of continuing with further...

SUSE CVE-2026-46010

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgkextracttoken Fix a missing bit of error handling in rxgkextracttoken: in the event that rxgkdecryptskb returns -ENOMEM, it should just return that rather than continuing on for anything else, it...

SUSE CVE-2026-46039

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

Linux Distros Unpatched Vulnerability : CVE-2026-46039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in...

CVE-2026-46039

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

UBUNTU-CVE-2026-46039

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

CVE-2026-46039 rxgk: Fix potential integer overflow in length check

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

CVE-2026-46039 rxgk: Fix potential integer overflow in length check

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

EUVD-2026-32420

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...

CVE-2026-46039

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgkextracttoken when checking the length of the ticket. Rather than rounding up the value to be tested which might overflow, round down the...