PT-2026-34989 · Linux+1 · Linux Kernel+1

CVE-2026-31637 · Published 2026-04-24 · Updated 2026-07-29

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The rxkad decrypt ticket() function decrypts the RXKAD response ticket but parses the buffer as plaintext without verifying if the crypto skcipher decrypt() operation was successful. A malformed RESPONSE using a non-block-aligned ticket length can cause the decryption to fail, allowing attacker-controlled bytes to be processed by the ticket parser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-31637

ECHO-E3F8-C6C9-2BC3

USN-8490-1

USN-8490-2

USN-8491-1

USN-8492-1

USN-8492-2

USN-8492-3

USN-8492-4

USN-8492-5

USN-8493-1

USN-8493-2

USN-8497-1

USN-8498-1

USN-8499-1

USN-8501-1

USN-8508-1

USN-8527-1

USN-8528-1

USN-8529-1

USN-8530-1

USN-8545-1

USN-8546-1

USN-8547-1

USN-8547-2

USN-8548-1

USN-8604-1

USN-8605-1

USN-8606-1

USN-8607-1

USN-8609-1

USN-8615-1

USN-8615-2

USN-8616-1

USN-8617-1

USN-8619-1

Affected Products

Linuxmint

Linux Kernel

References · 1615

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31637.json · Exploit
• https://ubuntu.com/security/CVE-2026-53083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46131 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8615-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46218 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31655 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58096 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46232 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46253 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46196 · Vendor Advisory