PT-2026-35136 · Linux+2 · Linux Kernel+2

Published 2026-04-25 · Updated 2026-06-16 · CVE-2026-31676

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RxRPC component where RESPONSE packets were not strictly limited to the service challenge phase. This allowed duplicate or late RESPONSE packets to re-run the setup path. The fix ensures that RESPONSE packets are only processed while the service connection is in the RXRPC CONN SERVICE CHALLENGING state, verified under state lock before security initialization and response verification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31676

ECHO-1C91-F5A8-99CB

USN-8371-1

USN-8373-1

USN-8374-1

USN-8393-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 433

• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68773 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23054 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23053 · Vendor Advisory