Security Flaw in Linux Kernel's Crypto Library and AF_RXRPC Components

CVE-2026-64208

What is CVE-2026-64208?

A vulnerability exists in the Linux kernel's crypto library and AF_RXRPC components, involving a lack of pre-decrypt and pre-verify length checks. This issue allows for potential exploitation during the decryption or verification of messages, as it does not adequately validate the length of incoming messages. The krb5 crypto library has been updated to include facilities for prechecking message lengths, thus improving the security of DATA packets secured with RxGK. This fix addresses the validation process, enhancing protection against malicious packet manipulation.

References