CVE-2026-46012

medium

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free th…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free the ticket and the server key under all circumstances by initialising the ticket pointer to NULL and then making all paths through the function after the first allocation has been done go through a single common epilogue that just releases everything - where all the releases skip on a NULL pointer.

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-05-27 14:17

Modified: 2026-10-30 13:18

NVD status: Modified

Last synced 3 days ago

Verified against the source API 2026-10-30 13:38 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥5.11 <6.6.140, ≥6.7 <6.12.86, ≥6.13 <6.18.27, ≥6.19 <7.0.4

Weakness classification (CWE)

CWE-401

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678f

Patch / mitigation: https://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2dd

Patch / mitigation: https://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40f

Patch / mitigation: https://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567c

Patch / mitigation: https://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52

References

https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2dd 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c14433e967cff95bebc77c9c4a2a0ed4e0e22783 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Data sources

NVD CVE API 2.0 — fetched 2026-10-30 13:38 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-46012

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs