Skip to main content
VulnerabilityPublished Updated

CVE-2026-46000: Linux kernel · rxrpc: Fix conn-level packet handling to unshare RESPONSE packets

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in d9b93a0f57ca5f6831bfaa34014b6cd705564a00 : update Linux kernel when convenient.

Data as of 30 Oct 2026, 12:36 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in d9b93a0f57ca5f6831bfaa34014b6cd705564a00, ca71ac2de389b01eecdc48bfafbdf073ec232044, c0428a22daf69714dc042b67ea759956b74c74e5 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 27 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < d9b93a0f57ca5f6831bfaa34014b6cd705564a00
Fixed in
  • d9b93a0f57ca5f6831bfaa34014b6cd705564a00
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < ca71ac2de389b01eecdc48bfafbdf073ec232044
Fixed in
  • ca71ac2de389b01eecdc48bfafbdf073ec232044
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < c0428a22daf69714dc042b67ea759956b74c74e5
Fixed in
  • c0428a22daf69714dc042b67ea759956b74c74e5
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < ae19f6a54206534a85830dd92985f5f41441d241
Fixed in
  • ae19f6a54206534a85830dd92985f5f41441d241
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < 24481a7f573305706054c59e275371f8d0fe919f
Fixed in
  • 24481a7f573305706054c59e275371f8d0fe919f
LinuxLinuxAffected
  • ≥ 17926a79320afa9b95df6b977b40cca6d8713cea, < 98a2046d155f73f6cf5d2c493c5e09b4963e2e12
Fixed in
  • 98a2046d155f73f6cf5d2c493c5e09b4963e2e12

AI-suggested

A fix is available and has been applied in the Linux kernel versions identified by the fixed commit hashes. Users should update to a Linux kernel version that includes these fixes to mitigate the vulnerability.

Description

A vulnerability in the Linux kernel's rxrpc connection-level packet handling was fixed to prevent shared RESPONSE packets from being decrypted in place, which could cause packet sniffers to see corrupted data. The fix involves copying the packet for the security handler when the packet was cloned.

References

Community reviews

Loading reviews…