CVE-2026-46085

Source
https://cve.org/CVERecord?id=CVE-2026-46085
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46085.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-46085
Downstream
Related
Published
2026-05-27T12:58:27Z
Modified
2026-10-08T02:50:55Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
rxrpc: Fix rxkad crypto unalignment handling
Details

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix rxkad crypto unalignment handling

Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARN_ON_ONCE() so that it can't be remotely triggered (a trace line can still be emitted).

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46085.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9853917f9edf08efb0b55c26d9eb8340f126d9e9
Fixed
f1c6bd0cc786a8fa74829ce3c4b3673944a308f4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e9c369d58785044427450350ad32d6a2497fb379
Fixed
440d20d95e844b657a93a0b2dcc2aae155efdce6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bf4d6e4a6856eedeb7f66eb91224115bfff4e2cb
Fixed
f0d3efd03b2a9e0f1ffa6df8fcb264af3d494286
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f93af41b9f5f798823d0d0fb8765c2a936d76270
Fixed
af9271eb666d07b6f65612dc160a47f7cb5220ed
Fixed
def304aae2edf321d2671fd6ca766a93c21f877e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.6.135
Fixed
6.6.140
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.82
Fixed
6.12.86
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.18.23
Fixed
6.18.27
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.19.13
Fixed
6.20
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5cdf57eda01a1ffaeb61ac39ec4dcc94a690431e

Affected versions

v6.*
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.19.13
v6.19.14
v6.6.135
v6.6.136
v6.6.137
v6.6.138
v6.6.139

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46085.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.6.140
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.86
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.27
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46085.json"