PT-2026-43879
CVE-2026-46012
·
Published
2026-04-23
·
Updated
2026-10-18
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description
A memory leak occurs in the
rxkad verify response() function within the rxrpc component. The issue arises when the ticket and server key are not properly freed under all execution paths.Recommendations
Update to a version where the
rxkad verify response() function is patched to ensure the ticket pointer is initialized to NULL and all paths lead to a common epilogue for resource release.
Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1. Found an issue in the description? Have something to add? Feel free to write us 👾