Packet Handling Flaw in Linux Kernel Affects Decryption Processes

CVE-2026-46085

What is CVE-2026-46085?

A vulnerability in the Linux kernel was identified related to rxrpc, which affects the handling of packets with misaligned crypto length during decryption. This issue can lead to unintended consequences as it fails to correctly manage non-ENOMEM errors, potentially disrupting the expected operation of cryptographic functions. The resolution includes improved alignment handling and the removal of the WARN_ON_ONCE() check to prevent remote triggering. As a result, users are encouraged to update their systems to mitigate this vulnerability and ensure secure communications.

References