CVE-2026-64208

HighCVSS 7.5/10Last modified Aug 12, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified.

Fix AF_RXRPC to make use of this to validate DATA packets secured with RxGK.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < 585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff; >= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < 9217017f4bce53dddb8d547837f1f707045d64ad; >= 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a, < 2b50aceafe6606ea52ed42aadd1b4d44a188aade
LinuxLinux6.16

References

Timeline

Published
Jul 24, 2026
Last modified
Aug 12, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-642097.1In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config CVE-2026-64217.0A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The maCVE-2026-642107.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix unlocked writing to ICOSQ During napi poll, when tCVE-2026-642115.5In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcCVE-2026-642125.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking itCVE-2026-642135.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: lm90CVE-2026-642145.5In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enable() calls from archCVE-2026-642155.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Check tCVE-2026-642169.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() netfs_CVE-2026-642177.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extracCVE-2026-642187.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_bla_CVE-2026-642197.0In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_d
CVE-2026-64208: High severity, CVSS 7.5 | Vulnix