CVE-2026-46012

5.5 Moyenne

Publiée le 27/05/2026 à 16:17 · Modifiée le 17/06/2026 à 12:52 · Analysée par le NVD · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxkad_verify_response() Fix rxkad_verify_response() to free the ticket and the server key under all circumstances by initialising the ticket pointer to NULL and then making all paths through the function after the first allocation has been done go through a single common epilogue that just releases everything - where all the releases skip on a NULL pointer.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-401

Références

https://git.kernel.org/stable/c/34f61a07e0cdefaecd3ec03bb5fb22215643678f Patch
https://git.kernel.org/stable/c/852b9d64cea421336579b2de3d1338dfa677e2dd Patch
https://git.kernel.org/stable/c/861b9a0a1823bf064a7b810d29502a9ef043f40f Patch
https://git.kernel.org/stable/c/c4b8f32e73eafd4a5076be890c7c8506ec04567c Patch
https://git.kernel.org/stable/c/c91f33fb8356dedc82bc56ce210f1a5dbee62a52 Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories