Improper Input Validation in Linux Kernel's rxrpc Component

CVE-2026-31696

What is CVE-2026-31696?

A vulnerability exists in the Linux kernel's rxrpc component related to improper validation of ticket length during key payload parsing. Specifically, the non-XDR parsing path neglects to verify that the ticket length does not exceed the specified maximum value, which can potentially be exploited by an unprivileged user. This oversight can lead to significant implications during the token size calculation, causing the system to trigger warnings and potentially impacting stability. A patch has been implemented to remedy this issue by adding necessary checks to align the non-XDR path's validation with that of the XDR path.

References