Potential Buffer Overflow in Linux Kernel RXKAD Ticket Processing

CVE-2026-31637

What is CVE-2026-31637?

A vulnerability in the Linux kernel's RXKAD ticket processing allows attackers to exploit the ticket parser by sending malformed response tickets. If the decryption of the RXKAD response ticket fails, the system may still attempt to parse the response as plaintext, leading to the execution of unverified and possibly malicious code. To mitigate this risk, it is essential for the kernel to validate decryption results and terminate the connection if decryption does not succeed.

References