Response Authenticator Oversize Check in Linux Kernel

CVE-2026-31635

What is CVE-2026-31635?

A vulnerability in the Linux kernel allows oversized RESPONSE authenticators to be accepted without proper length checks. The function rxgk_verify_response() fails to validate the authenticator's length against the remaining packet payload, which can result in buffer overflows during decryption processes. As a consequence, the system may reach an unstable state, exposing it to potential attacks. Developers are advised to ensure that authenticator lengths do not exceed packet limits to mitigate the risks associated with this flaw.

References