CVE-2026-64208

Published: Lug 24, 2026 Last Modified: Lug 27, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,5

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Change the krb5 crypto library to provide facilities to precheck the length
of the message about to be decrypted or verified.

Fix AF_RXRPC to make use of this to validate DATA packets secured with
RxGK.

https://git.kernel.org/stable/c/2b50aceafe6606ea52ed42aadd1b4d44a188aade

https://git.kernel.org/stable/c/585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff

https://git.kernel.org/stable/c/9217017f4bce53dddb8d547837f1f707045d64ad