Integer Overflow Vulnerability in Linux Kernel Affecting rxrpc Protocol

CVE-2026-31633

What is CVE-2026-31633?

A vulnerability has been identified in the Linux kernel's rxrpc protocol, where an integer overflow can occur in the rxgk_verify_response() function. This issue arises from the improper handling of token lengths, allowing a potential bypass of length checks. Specifically, the token_len is rounded up before being compared against a defined length, which is constrained to fit the response within a single UDP packet. This flaw has been addressed by ensuring that the unrounded token length is appropriately checked against the specified limits, thereby enhancing the security of the protocol.

References