PT-2026-64323 · Linux · Linux

CVE-2026-64208 · Published 2026-07-24 · Updated 2026-07-24

Mitre

In the Linux kernel, the following vulnerability has been resolved:

crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified.

Fix AF RXRPC to make use of this to validate DATA packets secured with RxGK.

Related Identifiers

CVE-2026-64208

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-64208 · Security Note
• https://git.kernel.org/stable/c/2b50aceafe6606ea52ed42aadd1b4d44a188aade · Note
• https://git.kernel.org/stable/c/9217017f4bce53dddb8d547837f1f707045d64ad · Note
• https://git.kernel.org/stable/c/585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff · Note