PT-2026-43879

CVE-2026-46012

·

Published

2026-04-23

·

Updated

2026-10-18

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description A memory leak occurs in the rxkad verify response() function within the rxrpc component. The issue arises when the ticket and server key are not properly freed under all execution paths.
Recommendations Update to a version where the rxkad verify response() function is patched to ensure the ticket pointer is initialized to NULL and all paths lead to a common epilogue for resource release. Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
AZL-88677
ECHO-2BCA-5E0C-F6C8
OPENSUSE-SU-2026:10954-1
USN-8488-1
USN-8488-2
USN-8489-1
USN-8507-1
USN-8567-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8619-1
USN-8665-1
Found an issue in the description? Have something to add? Feel free to write us 👾