CVE-2026-46012
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-27
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free the ticket and the server key under all circumstances by initialising the ticket pointer to NULL and then making all paths through the function after the first allocation has been done go through a single common epilogue that just releases everything - where all the releases skip on a NULL pointer.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < c14433e967cff95bebc77c9c4a2a0ed4e0e22783 |
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < c4b8f32e73eafd4a5076be890c7c8506ec04567c |
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < 852b9d64cea421336579b2de3d1338dfa677e2dd |
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < 861b9a0a1823bf064a7b810d29502a9ef043f40f |
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < c91f33fb8356dedc82bc56ce210f1a5dbee62a52 |
| Linux | Linux | ec832bd06d6fdf08b0455ab7c2a7a9104e029638 < 34f61a07e0cdefaecd3ec03bb5fb22215643678f |
| Linux | Linux | 5.11 |
| linux | linux_kernel | 5.11 – 6.6.140 |