CVE-2026-46000
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-27
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix conn-level packet handling to unshare RESPONSE packets The security operations that verify the RESPONSE packets decrypt bits of it in place - however, the sk_buff may be shared with a packet sniffer, which would lead to the sniffer seeing an apparently corrupt packet (actually decrypted). Fix this by handing a copy of the packet off to the specific security handler if the packet was cloned.
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < ae19f6a54206534a85830dd92985f5f41441d241 |
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < c0428a22daf69714dc042b67ea759956b74c74e5 |
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < 98a2046d155f73f6cf5d2c493c5e09b4963e2e12 |
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < ca71ac2de389b01eecdc48bfafbdf073ec232044 |
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < d9b93a0f57ca5f6831bfaa34014b6cd705564a00 |
| Linux | Linux | 17926a79320afa9b95df6b977b40cca6d8713cea < 24481a7f573305706054c59e275371f8d0fe919f |
| Linux | Linux | 2.6.22 |
| linux | linux_kernel | 2.6.22 – 6.6.140 |