Review reviewHigh

CVE-2026-46085

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet with a misaligned crypto length. Also handle non-ENOMEM errors from decryption by aborting. Further, remove the WARN_ON_ONCE() so that it can't be remotely triggered (a trace line can still be emitted).

CVSS: 7.5
EPSS: 0.44%
CISA KEV: Not listed
Published: 2026.05.27

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.44%

Technical severityCVSS 7.5

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: 9853917f9edf08efb0b55c26d9eb8340f126d9e9, e9c369d58785044427450350ad32d6a2497fb379, bf4d6e4a6856eedeb7f66eb91224115bfff4e2cb, f93af41b9f5f798823d0d0fb8765c2a936d76270, 5cdf57eda01a1ffaeb61ac39ec4dcc94a690431e, 6.6.135, 6.12.82, 6.18.23, 6.19.13, 7.0, >= 6.6.135 < 6.6.140, >= 6.12.82 < 6.12.86, >= 6.18.23 < 6.18.27, >= 6.19.13 < 7.0, >= 7.0.1 < 7.0.4
Fixed versions: 6.6.140, 6.12.86, 6.18.27, 7.0, 7.0.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: Not available