Skip to main content
CVE-2026-46012VulnerabilityPublished Updated

rxkad_verify_response() · rxrpc: Fix memory leaks

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-46012· Low

Not known to be exploited · fixed in c14433e967cff95bebc77c9c4a2a0ed4e0e22783 : update Microsoft when convenient.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Low

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in c14433e967cff95bebc77c9c4a2a0ed4e0e22783, c91f33fb8356dedc82bc56ce210f1a5dbee62a52, c4b8f32e73eafd4a5076be890c7c8506ec04567c +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 27 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < c14433e967cff95bebc77c9c4a2a0ed4e0e22783
Fixed in
  • c14433e967cff95bebc77c9c4a2a0ed4e0e22783
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < c91f33fb8356dedc82bc56ce210f1a5dbee62a52
Fixed in
  • c91f33fb8356dedc82bc56ce210f1a5dbee62a52
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < c4b8f32e73eafd4a5076be890c7c8506ec04567c
Fixed in
  • c4b8f32e73eafd4a5076be890c7c8506ec04567c
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < 861b9a0a1823bf064a7b810d29502a9ef043f40f
Fixed in
  • 861b9a0a1823bf064a7b810d29502a9ef043f40f
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < 852b9d64cea421336579b2de3d1338dfa677e2dd
Fixed in
  • 852b9d64cea421336579b2de3d1338dfa677e2dd
LinuxLinuxAffected
  • ≥ ec832bd06d6fdf08b0455ab7c2a7a9104e029638, < 34f61a07e0cdefaecd3ec03bb5fb22215643678f
Fixed in
  • 34f61a07e0cdefaecd3ec03bb5fb22215643678f

Description

CVE-2026-46012 addresses memory leaks in the rxkad_verify_response() function related to Microsoft and Azure Linux 3.0. The vulnerability involves improper memory management that could lead to resource exhaustion. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…