PT-2026-64323 · Linux · Linux

CVE-2026-64208 · Publicado 2026-07-24 · Atualizado 2026-07-24

Mitre

In the Linux kernel, the following vulnerability has been resolved:

crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified.

Fix AF RXRPC to make use of this to validate DATA packets secured with RxGK.

Identificadores relacionados

CVE-2026-64208

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/2b50aceafe6606ea52ed42aadd1b4d44a188aade · Nota
• https://git.kernel.org/stable/c/9217017f4bce53dddb8d547837f1f707045d64ad · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64208 · Nota de Segurança
• https://git.kernel.org/stable/c/585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff · Nota