CVE-2026-31633
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/04/2026
Última modificación:
24/04/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
rxrpc: Fix integer overflow in rxgk_verify_response()<br />
<br />
In rxgk_verify_response(), there&#39;s a potential integer overflow due to<br />
rounding up token_len before checking it, thereby allowing the length check to<br />
be bypassed.<br />
<br />
Fix this by checking the unrounded value against len too (len is limited as<br />
the response must fit in a single UDP packet).



