CVE-2026-31633: rxrpc: Fix integer overflow in rxgk_verify_response()
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix integer overflow in rxgkverifyresponse()
In rxgkverifyresponse(), there's a potential integer overflow due to rounding up tokenlen before checking it, thereby allowing the length check to be bypassed.
Fix this by checking the unrounded value against len too (len is limited as the response must fit in a single UDP packet).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31633?
CVE-2026-31633 has been classified as a medium severity vulnerability due to the potential for integer overflow.
How do I fix CVE-2026-31633?
To fix CVE-2026-31633, update to the latest version of the Linux kernel that includes the patch addressing this vulnerabilities.
What is affected by CVE-2026-31633?
CVE-2026-31633 affects the RXRPC implementation in the Linux kernel.
What causes CVE-2026-31633?
CVE-2026-31633 is caused by an integer overflow in the rxgk_verify_response() function due to improper handling of token length.
Is CVE-2026-31633 exploitable remotely?
CVE-2026-31633 may be exploitable remotely depending on the configuration and use of RXRPC in the affected Linux kernel.