PT-2026-36326 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-06-02 · CVE-2026-31696

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the rxrpc preparse() function, the non-XDR path for parsing key payloads (used for payloads 28 bytes or smaller) fails to validate the ticket length against AFSTOKEN RK TIX MAX. This differs from the XDR path, which performs this validation correctly. An unprivileged user can provide an excessively large ticket length, which causes the total token size calculation in the rxrpc read() function to exceed AFSTOKEN LENGTH MAX, resulting in a system warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-31696

ECHO-93EE-8082-FBDD

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 55

• https://nvd.nist.gov/vuln/detail/CVE-2026-31696 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31696 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31696 · Vendor Advisory
• https://git.kernel.org/stable/c/4458757c020592a3094366e0fb20457383b42f92 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31696 · Security Note
• https://git.kernel.org/stable/c/ac33733b10b484d666f97688561670afd5861383 · Patch
• https://git.kernel.org/stable/c/1fa36cf495b0023e8475d038535c05e4063211e1 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31696 · Vendor Advisory
• https://git.kernel.org/stable/c/a1be1c9ece26cea69654f28b255ff9a7906b897b · Patch
• https://git.kernel.org/stable/c/ce383ba615339f8eaec646a166d2c2b015bb5ca0 · Patch
• https://ubuntu.com/security/CVE-2026-31696 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31696 · Vendor Advisory
• https://reddit.com/r/slackware/comments/1tupi6s/fyi_slackware_150_changelog_includes_kernel · Reddit Post
• https://suse.com/security/cve/CVE-2026-31698 · Note