CVE-2026-46010

A flaw was found in the Linux kernel's rxrpc component. Missing error handling in the rxgk_extract_token() function, specifically when rxgk_decrypt_skb() returns an out-of-memory error (-ENOMEM), could lead to an unexpected system abort. This vulnerability could allow a local attacker to cause a Denial of Service (DoS) by triggering this specific error condition.

This vulnerability is rated as Moderate severity because triggering the issue requires local access under specific out-of-memory conditions and primarily results in a denial of service without compromising system confidentiality or integrity. In typical Red Hat deployments, the rxrpc protocol is not used by default, limiting practical exposure to configurations that actively utilize the kernel RxRPC networking subsystem or in-kernel AFS. Earlier enterprise releases, including Red Hat Enterprise Linux 8 and 9, do not include the affected code and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.