Out-of-Bounds Read in Linux Kernel's RXRPC Module

CVE-2026-31636

What is CVE-2026-31636?

A vulnerability exists in the RXRPC module of the Linux kernel that allows an out-of-bounds read due to improper handling of the RESPONSE authenticator parser. The function rxgk_verify_authenticator() incorrectly calculates the parser limit, resulting in a potentially exploitable memory read past the allocated buffer. This can lead to unauthorized access or information disclosure, highlighting the need for timely updates and security patches in affected Linux kernel versions.

References