PT-2026-43867 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-46000

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rxrpc component regarding connection-level packet handling. Security operations that verify RESPONSE packets decrypt portions of the data in place. If the sk buff (socket buffer) is shared with a packet sniffer, the sniffer may perceive the packet as corrupt because it sees the decrypted data instead of the original encrypted content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46000

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-46000 · Security Note
• https://git.kernel.org/stable/c/ca71ac2de389b01eecdc48bfafbdf073ec232044 · Note
• https://git.kernel.org/stable/c/d9b93a0f57ca5f6831bfaa34014b6cd705564a00 · Note
• https://twitter.com/windowsforum/status/2059932986707992765 · Twitter Post
• https://git.kernel.org/stable/c/c0428a22daf69714dc042b67ea759956b74c74e5 · Note
• https://git.kernel.org/stable/c/98a2046d155f73f6cf5d2c493c5e09b4963e2e12 · Note
• https://git.kernel.org/stable/c/24481a7f573305706054c59e275371f8d0fe919f · Note