2 matches found
rxrpc: reject undecryptable rxkad response tickets
...
9.8CVSS5.8AI score0.00514EPSS
SaveExploits0
CVE-2026-31637
The CVE-2026-31637 vulnerability lies in the Linux kernel rxrpc subsystem. Specifically, rxkad_decrypt_ticket() decrypts the RXKAD response ticket and then parses the buffer as plaintext without confirming that crypto_skcipher_decrypt() succeeded. A malformed RXKAD response could use a non-block-...
9.8CVSS5.6AI score0.00514EPSS
SaveExploits0References8Affected Software1
20