CVE-2026-31634

MEDIUM

rxrpc: fix reference count leak in rxrpc_server_keyring()

Title source: cna

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpc_server_keyring() This patch fixes a reference count leak in rxrpc_server_keyring() by checking if rx->securities is already set.

References (7)

Core 7

Core References

https://git.kernel.org/stable/c/fc76d0bd00850b7372f0a4a319c0c60f80487632

https://git.kernel.org/stable/c/c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2

https://git.kernel.org/stable/c/9ce36d28f67c2a477a7e2f03480de3f6783fb363

https://git.kernel.org/stable/c/12de9e0e0b0b7058be7dfb8a5927eb565bc25780

https://git.kernel.org/stable/c/8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a

https://git.kernel.org/stable/c/139c750bf06649097d98b0bc41e2a678b4627e27

https://git.kernel.org/stable/c/f125846ee79fcae537a964ce66494e96fa54a6de

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 1.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (19)

Linux/Linux < 2.6.22

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - 12de9e0e0b0b7058be7dfb8a5927eb565bc25780

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - 139c750bf06649097d98b0bc41e2a678b4627e27

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - 8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - 9ce36d28f67c2a477a7e2f03480de3f6783fb363

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - f125846ee79fcae537a964ce66494e96fa54a6de

Linux/Linux 17926a79320afa9b95df6b977b40cca6d8713cea - fc76d0bd00850b7372f0a4a319c0c60f80487632

Linux/Linux 2.6.22

Linux/Linux 5.15.203 - 5.15.*

... and 9 more

Published Apr 24, 2026

Tracked Since Apr 24, 2026