CVE-2026-46000

A flaw was found in the Linux kernel's rxrpc component. Security operations that decrypt RESPONSE packets in place may share the socket buffer (sk_buff) with a packet sniffer. This could allow a local attacker or an attacker with network access to intercept and view decrypted portions of these packets, leading to information disclosure.

Red Hat has evaluated this issue as having a Moderate severity because exploitation requires active network traffic using the AF_RXRPC protocol alongside an active packet-capture process, which is not part of default enterprise workloads. The flaw is confined to unintended exposure of decrypted response data to local sniffers, without permitting arbitrary code execution or privilege escalation. Systems that do not load or utilize the RxRPC subsystem or kAFS remain unaffected under typical operating conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.