Heap Buffer Overflow in Linux Kernel due to RxGK Token Loading Issue

CVE-2026-31641

What is CVE-2026-31641?

A vulnerability in the Linux kernel related to RxGK token loading could lead to a heap buffer overflow. The issue arises when rxrpc_preparse_xdr_yfs_rxgk() reads raw key and ticket lengths as u32 values and incorrectly processes them, especially for lengths that exceed specific thresholds. This flaw enables an unprivileged user to exploit the system by invoking an add_key() call, potentially resulting in unauthorized memory access. The vulnerability has been addressed by implementing stricter checks on raw lengths before processing and optimizing memory allocation to mitigate the risk.

References