CVE-2026-46012

rxrpc: Fix memory leaks in rxkad_verify_response()

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix memory leaks in rxkad_verify_response()

Fix rxkad_verify_response() to free the ticket and the server key under all

circumstances by initialising the ticket pointer to NULL and then making

all paths through the function after the first allocation has been done go

through a single common epilogue that just releases everything - where all

the releases skip on a NULL pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-27T12:56Z
EPSS history
Timeline
  • 27 MAY 12:56Z
    rxrpc: Fix memory leaks in rxkad_verify_response()
    cvelistv5