AZL-88599
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88599.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-88599
- Upstream
- Published
- 2026-05-27T14:17:17Z
- Modified
- 2026-08-28T17:48:05.472233580Z
- Summary
- CVE-2026-46000 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the sk_buff may be shared with a packet sniffer, which would lead to the sniffer seeing an apparently corrupt packet (actually decrypted).
Fix this by handing a copy of the packet off to the specific security handler if the packet was cloned.
- References