PT-2026-43906 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-46039

NVD

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

rxgk: Fix potential integer overflow in length check

Fix potential integer overflow in rxgk extract token() when checking the length of the ticket. Rather than rounding up the value to be tested (which might overflow), round down the size of the available data.

Fix

Related Identifiers

CVE-2026-46039

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-46039 · Security Note
• https://git.kernel.org/stable/c/6929350080f4da292d111a3b33e53138fee51cec · Note
• https://git.kernel.org/stable/c/183d37f12d1c8ed24a5bfc7addad05510da22a94 · Note
• https://git.kernel.org/stable/c/43222ac484f93b3ec2d240a7575e1cedd31f5fa4 · Note