CVE-2026-64026

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rxrpc module where in-place decryption of a DATA packet transmitted locally via the splice() function can lead to pagecache corruption. This occurs due to packet sharing in the I/O thread. The issue is addressed by extracting packet content into a bounce buffer for decryption, ensuring the sk buff remains unmodified and the data is correctly aligned for crypto algorithms. This process involves the recvmsg() function copying data from the bounce buffer to the destination buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.