Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-45988: Linux kernel rxrpc decryption fix prevents packet re-use
CVE-2026-45988
Summary
A fix has been made in the Linux kernel to prevent temporary packets from being re-used. This prevents potential security risks and data corruption. Linux kernel users should ensure they have the latest updates installed.
Original title
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix re-decryption of RESPONSE packets
If a RESPONSE packet gets a temporary failure during processing, it may end
up in ...
Original description
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix re-decryption of RESPONSE packets
If a RESPONSE packet gets a temporary failure during processing, it may end
up in a partially decrypted state - and then get requeued for a retry.
Fix this by just discarding the packet; we will send another CHALLENGE
packet and thereby elicit a further response. Similarly, discard an
incoming CHALLENGE packet if we get an error whilst generating a RESPONSE;
the server will send another CHALLENGE.
rxrpc: Fix re-decryption of RESPONSE packets
If a RESPONSE packet gets a temporary failure during processing, it may end
up in a partially decrypted state - and then get requeued for a retry.
Fix this by just discarding the packet; we will send another CHALLENGE
packet and thereby elicit a further response. Similarly, discard an
incoming CHALLENGE packet if we get an error whilst generating a RESPONSE;
the server will send another CHALLENGE.
nvd CVSS3.1
9.8
- https://git.kernel.org/stable/c/0422e7a4883f25101903f3e8105c0808aa5f4ce9
- https://git.kernel.org/stable/c/76cb9a2d252274adfae6e293a292434631a7d472
- https://git.kernel.org/stable/c/7b89868305052b94a91b708c462bc2281fa42a4a
- https://git.kernel.org/stable/c/d61482be4aae1835b78875761206241835a7510e
- https://git.kernel.org/stable/c/f55b383070170e988e4dec28be2af1714d258521
Published: 27 May 2026 · Updated: 31 May 2026 · First seen: 30 May 2026