Linux Kernel RxRPC Decrypt Packet Leakage Vulnerability (CVE-2026-46000)
CVE-2026-46000 Published on May 27, 2026
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
The security operations that verify the RESPONSE packets decrypt bits of it
in place - however, the sk_buff may be shared with a packet sniffer, which
would lead to the sniffer seeing an apparently corrupt packet (actually
decrypted).
Fix this by handing a copy of the packet off to the specific security
handler if the packet was cloned.
Products Associated with CVE-2026-46000
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version 17926a79320afa9b95df6b977b40cca6d8713cea and below c0428a22daf69714dc042b67ea759956b74c74e5 is affected.
- Version 17926a79320afa9b95df6b977b40cca6d8713cea and below 98a2046d155f73f6cf5d2c493c5e09b4963e2e12 is affected.
- Version 17926a79320afa9b95df6b977b40cca6d8713cea and below ca71ac2de389b01eecdc48bfafbdf073ec232044 is affected.
- Version 17926a79320afa9b95df6b977b40cca6d8713cea and below d9b93a0f57ca5f6831bfaa34014b6cd705564a00 is affected.
- Version 17926a79320afa9b95df6b977b40cca6d8713cea and below 24481a7f573305706054c59e275371f8d0fe919f is affected.
- Version 2.6.22 is affected.
- Before 2.6.22 is unaffected.
- Version 6.6.140, <= 6.6.* is unaffected.
- Version 6.12.88, <= 6.12.* is unaffected.
- Version 6.18.27, <= 6.18.* is unaffected.
- Version 7.0.4, <= 7.0.* is unaffected.
- Version 7.1, <= * is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.