CVE-2026-31633
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/04/2026
Last modified:
24/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
rxrpc: Fix integer overflow in rxgk_verify_response()<br />
<br />
In rxgk_verify_response(), there&#39;s a potential integer overflow due to<br />
rounding up token_len before checking it, thereby allowing the length check to<br />
be bypassed.<br />
<br />
Fix this by checking the unrounded value against len too (len is limited as<br />
the response must fit in a single UDP packet).



