First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-31631

HighCVSS 8.2/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

Fix rxgk_do_verify_authenticator() to check the buffer size before checking the nonce.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weakness enumeration

CWE-787 CWE-125

Affected software

Vendor	Product	Versions
Linux	Linux	>= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < 794586789800b16dcbe235452494f4223ac80413; >= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < 1c4422d8be81718ecb15d79aedff607323085201; >= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < f564af387c8c28238f8ebc13314c589d7ba8475d
Linux	Linux	6.16

References

Timeline

Published: Apr 24, 2026
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-316325.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk_verify_response() Fix rxgk_ver CVE-2026-316339.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_r CVE-2026-316345.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpc_server_keyring() This patch f CVE-2026-316357.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized RESPONSE authenticator length check rxgk_verify_r CVE-2026-316369.1In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenti CVE-2026-316379.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticke CVE-2026-316387.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Only put the call ref if one was acquired rxrpc_input_packet_on CVE-2026-316395.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key When creating a cli CVE-2026-31649.8A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the file /admin/contactus.p CVE-2026-316407.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial CVE-2026-316417.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix RxGK token loading to check bounds rxrpc_preparse_xdr_yfs_r CVE-2026-316425.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call remova

CVE-2026-31631: High severity, CVSS 8.2 | Vulnix