Technical impact
The Linux kernel contains an integer overflow in the rxgk_extract_token() function that occurs when calculating the length of a ticket. The original code rounded the value up for the check, which could exceed the limits of the provided data and corrupt kernel memory. The patch changes the logic to round the size down, eliminating the overflow.
Affected Systems
All Linux kernel installations that include the rxgk module and have not yet applied the patch are affected. No specific kernel versions are listed, so any kernel released before the fix should be considered vulnerable until verified otherwise.
Risk and Exploitability
The advisory assigns a CVSS score of 9.8, indicating significant impact. The EPSS score of 0.00017 reflects a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. No public exploits are known, so the risk remains largely theoretical. The attack would require delivering a crafted input to the rxgk module, but the necessary conditions and confidence of exploitation are not detailed.
Ubuntu USN