Answer in brief
CVE-2026-64208 records a Unknown severity vulnerability in crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff || >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <9217017f4bce53dddb8d547837f1f707045d64ad || >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <2b50aceafe6606ea52ed42aadd1b4d44a188aade | 585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff, 9217017f4bce53dddb8d547837f1f707045d64ad, 2b50aceafe6606ea52ed42aadd1b4d44a188aade |
| Linux/Linuxgeneric | 6.16 | Not reported |
Published upstream
Jul 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AF_RXRPC to make use of this to validate DATA packets secured with RxGK.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-64208 records a Unknown severity vulnerability in crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff || >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <9217017f4bce53dddb8d547837f1f707045d64ad || >=9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a <2b50aceafe6606ea52ed42aadd1b4d44a188aade | 585f9f6aef5c4542ac9d6ec45cd7dbc7df9af3ff, 9217017f4bce53dddb8d547837f1f707045d64ad, 2b50aceafe6606ea52ed42aadd1b4d44a188aade |
| Linux/Linuxgeneric | 6.16 | Not reported |
Published upstream
Jul 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AF_RXRPC to make use of this to validate DATA packets secured with RxGK.
Quoted source text, attributed separately from HOL analysis.