by Kastro
Paper/Archive/CVE-2026-46039

CVE-2026-46039

Linux Linux — rxgk: Fix potential integer overflow in length check

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 38.4.384 × 207.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgk_extract_token() when checking the length of the ticket. Rather than rounding up the value to be tested (which might overflow), round down the size of the available data.

Affected

ProductAffectedFixed inSource
Linux2429a197648178cd4dc930a9d87c13c547460564 – < 43222ac484f93b3ec2d240a7575e1cedd31f5fa443222ac484f93b3ec2d240a7575e1cedd31f5fa4CNA
Linux2429a197648178cd4dc930a9d87c13c547460564 – < 183d37f12d1c8ed24a5bfc7addad05510da22a94183d37f12d1c8ed24a5bfc7addad05510da22a94CNA
Linux2429a197648178cd4dc930a9d87c13c547460564 – < 6929350080f4da292d111a3b33e53138fee51cec6929350080f4da292d111a3b33e53138fee51cecCNA
Linux71571e187106631a8127f2dde780f35caa358d33–CNA
Linux6.16.9 – < 6.176.17CNA
Linux6.176.18.27CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/43222ac484f93b3ec2d240a7575e1cedd31f5fa4refgit.kernel.org/stable/c/183d37f12d1c8ed24a5bfc7addad05510da22a94refgit.kernel.org/stable/c/6929350080f4da292d111a3b33e53138fee51cec