NetSight
IP …
critical9.8

CVE-2026-45988

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If a RESPONSE packet gets a temporary failure …

Impact

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If a RESPONSE packet gets a temporary failure during processing, it may end up in a partially decrypted state - and then get requeued for a retry. Fix this by just discarding the packet; we will send another CHALLENGE packet and thereby elicit a further response. Similarly, discard an incoming CHALLENGE packet if we get an error whilst generating a RESPONSE; the server will send another CHALLENGE.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.22 before 6.6.140
from 6.7 before 6.12.86
from 6.13 before 6.18.27
from 6.19 before 7.0.4

Weakness classification

CWE-682

References