Home

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpc_post_response(), the code should be comparing the challenge serial number from the cached response before deciding to switch to a newer response, but looks at the newer packet private data instead, rendering the comparison always false. Fix this by switching to look at the older packet. Fix further[1] to substitute the new packet in place of the old one if newer and also to release whichever we don't use.

PUBLISHED Reserved 2026-03-09 | Published 2026-04-24 | Updated 2026-04-24 | Assigner Linux

Product status

Default status
unaffected

5800b1cf3fd8ccab752a101865be1e76dac33142 (git) before 9132b1a7bf83b4a8042fffbc99d075b727a16742
affected

5800b1cf3fd8ccab752a101865be1e76dac33142 (git) before 20386e7f8d97475b8d815873e246423317ec4260
affected

5800b1cf3fd8ccab752a101865be1e76dac33142 (git) before b33f5741bb187db8ff32e8f5b96def77cc94dfca
affected

Default status
affected

6.16
affected

Any version before 6.16
unaffected

6.18.23 (semver)
unaffected

6.19.13 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/9132b1a7bf83b4a8042fffbc99d075b727a16742

git.kernel.org/...c/20386e7f8d97475b8d815873e246423317ec4260

git.kernel.org/...c/b33f5741bb187db8ff32e8f5b96def77cc94dfca

cve.org (CVE-2026-31640)

nvd.nist.gov (CVE-2026-31640)

Download JSON