CVE-2026-46039

A flaw was found in the Linux kernel. A potential integer overflow in the rxgk_extract_token() function, specifically during the length check of a ticket, could occur. This issue arises from rounding up the value to be tested, which might lead to an overflow. This could potentially result in unpredictable system behavior or a denial of service.

Red Hat has rated this vulnerability as Moderate severity because exploitation requires local access with complex prerequisites to manipulate RxRPC ticket validation, mitigating direct remote attack vectors. In typical Red Hat deployments, the RxRPC network protocol and its associated GSS-API security extensions are not utilized by default. As a result, standard enterprise environments remain largely unexposed unless explicitly configured to use AFS or RxRPC communication.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.