Buffer Overread Vulnerability in Linux Kernel Affecting Multiple Distributions

CVE-2026-31631

What is CVE-2026-31631?

A vulnerability exists in the Linux kernel related to the rxrpc module, specifically within the rxgk_do_verify_authenticator function. This vulnerability allows for buffer overreads by not adequately checking buffer sizes before verifying nonces, which can lead to unauthenticated access and potential disclosure of sensitive information. Remedial measures have been implemented to ensure proper validation of buffer sizes in affected versions.

References