CVE-2026-31676: rxrpc: only handle RESPONSE during service challenge
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: only handle RESPONSE during service challenge
Only process RESPONSE packets while the service connection is still in RXRPCCONNSERVICECHALLENGING. Check that state under statelock before running response verification and security initialization, then use a local secured flag to decide whether to queue the secured-connection work after the state transition. This keeps duplicate or late RESPONSE packets from re-running the setup path and removes the unlocked post-transition state test.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31676?
CVE-2026-31676 has a medium severity rating due to its potential impact on the RXRPC protocol handling.
How do I fix CVE-2026-31676?
To fix CVE-2026-31676, update to the latest version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-31676?
CVE-2026-31676 affects Linux kernel versions that utilize the RXRPC protocol.
What are the potential risks associated with CVE-2026-31676?
Exploiting CVE-2026-31676 could lead to denial of service or unauthorized access during the service challenge phase.
When was CVE-2026-31676 announced?
CVE-2026-31676 was announced as a resolved vulnerability in the Linux kernel, but the exact disclosure date may vary based on the kernel patch.