CVE-2026-46039: rxgk: Fix potential integer overflow in length check
Vulnerability summary
CVE-2026-46039 is a critical (CVSS 9.8) Integer Overflow or Wraparound vulnerability in linux. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 38.4% of scored vulnerabilities.
Severe, CVSS 9.8 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 0% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 9 · Related 15Timeline
- 27-05-2026PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length check Fix potential integer overflow in rxgk_extract_token() when checking the length of the ticket. Rather than rounding up the value to be tested (which might overflow), round down the size of the available data.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.44%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
Decrease -0.21 pp
From 0.65% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu108 products
- linux< 6.17.0-40.40 | < 7.0.0-27.27
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.17.0-1019.19 | < 7.0.0-1008.8
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 2429a197648178cd4dc930a9d87c13c547460564, < 43222ac484f93b3ec2d240a7575e1cedd31f5fa4 | ≥ 2429a197648178cd4dc930a9d87c13c547460564, < 183d37f12d1c8ed24a5bfc7addad05510da22a94 | ≥ 2429a197648178cd4dc930a9d87c13c547460564, < 6929350080f4da292d111a3b33e53138fee51cec | 71571e187106631a8127f2dde780f35caa358d33 | ≥ 6.16.9, < 6.17 | 6.17
- linux_kernelEOL≥ 6.16.9, < 6.17 | ≥ 6.17.1, < 6.18.27 | ≥ 6.19, < 7.0.4 | 6.17 | 6.17:rc7
Debian1 product
- linux< 7.0.4-1
3 vendors · 111 products
