CVE-2026-31631

A flaw was found in the Linux kernel, specifically within its rxrpc communication protocol. This vulnerability is a buffer overread, meaning the system attempts to read data beyond the allocated memory buffer in the rxgk_do_verify_authenticator() function. This could potentially allow an attacker to access sensitive information or cause the system to become unavailable.

RxGK authenticator parsing could read past skb bounds; upstream tightens length checks. Red Hat treats this as kernel network stack hardening for AFS/RX security paths.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.