The Linux kernel’s rxrpc subsystem implements a network protocol for remote procedure call communication. A flaw in rxgk_do_verify_authenticator() was discovered where the function does not validate that the buffer contains sufficient data before accessing the nonce field, resulting in a buffer overread. This omission can potentially expose data stored beyond the intended buffer boundaries or trigger a kernel fault that could crash the operating system.

The vulnerability exists in kernel versions that include the rxrpc implementation prior to the application of the fix. According to the CPE list, affected releases include the mainline 6.16 series and the 7.0 release candidates up to rc7. All Linux distributions or custom builds that ship with any of those kernel versions are vulnerable until a patched release is installed.

The CVSS base score of 8.2 indicates high severity with possible integrity and availability impact. The EPSS score of less than 1% suggests that exploitation is considered unlikely in the wild, and the vulnerability is not listed in the CISA KEV catalog, implying no widely known public exploits. The likely attack vector is a malicious rxrpc packet sent over the network to trigger the overread, as is typical for kernel‑level buffer overread defects in networking code. This inference is based on the nature of the function and the protocol involved.