Critical severity9.8NVD Advisory· Published May 27, 2026· Updated Jun 17, 2026

CVE-2026-46039

Description

In the Linux kernel, the following vulnerability has been resolved:

rxgk: Fix potential integer overflow in length check

Fix potential integer overflow in rxgk_extract_token() when checking the length of the ticket. Rather than rounding up the value to be tested (which might overflow), round down the size of the available data.

Affected products

Linux/Kernel4 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.16.9,<6.17
- cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.17:rc7:*:*:*:*:*:*
- (no CPE)
osv-coords2 versions
pkg:linux/kernel pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
>= 6.17.0, < 6.18.27+ 1 more
- (no CPE)range: >= 6.17.0, < 6.18.27
- (no CPE)range: < 7.0.11-1.1

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2026-46039

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions