Riskcovery

CVE-2026-74432

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Oct 30, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released call if MSG_PEEK is in force (the function holds a ref on the call irrespective of whether MSG_PEEK is specified or not).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7692bde890061797f3dece0148d7859e85c55778 to before 86eff3140c9d4b52bba13d1cba266da933403e51Affected
  • 839fe96c15209dc2255c064bb44b636efe04f032 to before e473cd3046a1aaec1e39af5df2042ce7c04d5e74Affected
  • 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc to before 2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5Affected
  • 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc to before 04c7103dc0923cc6ac95b97aa66bab70da7ace84Affected
  • 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc to before 4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303cAffected
  • 4aed0eeca58e26d752bb08b293b8dc75c6820b23Affected
  • cb720b068b18fb39c96980eb3c13f09427512be7Affected
  • 6c75a97a32a5fa2060c3dd30207e63b6914b606dAffected
  • 6.6.100 to before 6.6.145Affected
  • 6.12.40 to before 6.12.97Affected
  • 5.10.266 to before 5.11Affected
  • 6.1.191 to before 6.2Affected
  • 6.15.8 to before 6.16Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.