CVE-2026-46085: rxrpc: Fix rxkad crypto unalignment handling
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix rxkad crypto unalignment handling
Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARNONONCE() so that it can't be remotely triggered (a trace line can still be emitted).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46085?
The severity of CVE-2026-46085 is rated at 37.
What does CVE-2026-46085 address?
CVE-2026-46085 addresses the handling of misaligned crypto lengths in RxRPC within the Linux kernel.
How do I fix CVE-2026-46085?
To fix CVE-2026-46085, update to the latest version of the Linux kernel where the vulnerability has been patched.
Can CVE-2026-46085 be remotely exploited?
CVE-2026-46085 cannot be remotely triggered due to the removal of the WARN_ON_ONCE() condition.
What are the implications of CVE-2026-46085 if left unpatched?
If left unpatched, CVE-2026-46085 may lead to improper handling of decryption errors and potential application crashes.