CVE-2026-31633 - Vulnerability Analysis

Overview

Linux kernel contains an integer overflow caused by improper rounding of token_len in rxgk_verify_response(), letting attackers bypass length checks, exploit requires crafted UDP packet.

Severity & Score

Impact

Attackers can bypass length checks, potentially leading to memory corruption or denial of service.

Mitigation

Update to the latest Linux kernel version with the fix for rxgk_verify_response() integer overflow.

References

• https://git.kernel.org/stable/c/c1e242beb6b1efc3c286f617e8d940c8fbf2ed41
• https://git.kernel.org/stable/c/1f864d9daaf622aeaa774404fd51e7d6a435b046
• https://git.kernel.org/stable/c/699e52180f4231c257821c037ed5c99d5eb0edb8

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner