imPC@ndo IT

Tracker / CVE-2026-64208

CVE-2026-64208

High 7.5

In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AF_RXRPC to make use of this to validate DATA packets secured with RxGK.

Affected products and versions

linux linux_kernel
linux linux_kernel · 6.16 → 6.18.34
linux linux_kernel · 6.19 → 7.0.11

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References