{"id":"CVE-2026-46085","summary":"rxrpc: Fix rxkad crypto unalignment handling","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix rxkad crypto unalignment handling\n\nFix handling of a packet with a misaligned crypto length.  Also handle\nnon-ENOMEM errors from decryption by aborting.  Further, remove the\nWARN_ON_ONCE() so that it can't be remotely triggered (a trace line can\nstill be emitted).","modified":"2026-10-28T02:30:57.954707330Z","published":"2026-05-27T12:58:27.125Z","related":["openSUSE-SU-2026:10954-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46085.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/440d20d95e844b657a93a0b2dcc2aae155efdce6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/af9271eb666d07b6f65612dc160a47f7cb5220ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/def304aae2edf321d2671fd6ca766a93c21f877e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f0d3efd03b2a9e0f1ffa6df8fcb264af3d494286"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f1c6bd0cc786a8fa74829ce3c4b3673944a308f4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46085.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46085"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9853917f9edf08efb0b55c26d9eb8340f126d9e9"},{"fixed":"f1c6bd0cc786a8fa74829ce3c4b3673944a308f4"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e9c369d58785044427450350ad32d6a2497fb379"},{"fixed":"440d20d95e844b657a93a0b2dcc2aae155efdce6"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"bf4d6e4a6856eedeb7f66eb91224115bfff4e2cb"},{"fixed":"f0d3efd03b2a9e0f1ffa6df8fcb264af3d494286"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f93af41b9f5f798823d0d0fb8765c2a936d76270"},{"fixed":"af9271eb666d07b6f65612dc160a47f7cb5220ed"},{"fixed":"def304aae2edf321d2671fd6ca766a93c21f877e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.6.135"},{"fixed":"6.6.140"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.12.82"},{"fixed":"6.12.86"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.18.23"},{"fixed":"6.18.27"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.19.13"},{"fixed":"6.20"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5cdf57eda01a1ffaeb61ac39ec4dcc94a690431e"}]}],"versions":["v6.6.139","v6.6.138","v6.6.137","v6.6.136","v6.6.135","v6.12.85","v6.12.84","v6.12.83","v6.12.82","v6.18.26","v6.18.25","v6.18.24","v6.18.23","v6.19.14","v6.19.13"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46085.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.140"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.86"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.27"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46085.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}