CVE-2026-74428

rxrpc: Fix double unlock in rxrpc_recvmsg()

State
Published
Severity
9.8 Critical
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix double unlock in rxrpc_recvmsg()

Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before 8cd8cf3052fff9a4b86b25734f610e4af03786d3Affected
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before 1297ae6aeebc3863cb437e42a1bc4cd6173e43d9Affected
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before a2f299b4d5510147fa8629a6aba2869bbcc88aeaAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.