What’s Vulnerable › Vulnerabilities
CVE-2026-31634: rxrpc: fix reference count leak in rxrpc_server_keyring()
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-24 · updated 2026-10-15
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpc_server_keyring() This patch fixes a reference count leak in rxrpc_server_keyring() by checking if rx->securities is already set.
Affected products
- Linux kernel: from 2.6.22.1 before 5.15.203; from 5.16 before 6.1.169; from 6.2 before 6.6.135; from 6.7 before 6.12.82; from 6.13 before 6.18.23; from 6.19 before 6.19.13 — fixed in 5.15.203, 6.1.169, 6.12.82, 6.18.23, 6.19.13, 6.6.135
How to fix
Upgrade to a fixed version: Linux kernel 5.15.203, 6.1.169, 6.12.82, 6.18.23. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/12de9e0e0b0b7058be7dfb8a5927eb565bc25780
- https://git.kernel.org/stable/c/139c750bf06649097d98b0bc41e2a678b4627e27
- https://git.kernel.org/stable/c/45d9584e51bdd61faf1900f82666d4ea6a85da72
- https://git.kernel.org/stable/c/8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a
- https://git.kernel.org/stable/c/9ce36d28f67c2a477a7e2f03480de3f6783fb363
- https://git.kernel.org/stable/c/c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2
- https://git.kernel.org/stable/c/f125846ee79fcae537a964ce66494e96fa54a6de
- https://git.kernel.org/stable/c/fc76d0bd00850b7372f0a4a319c0c60f80487632
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Get alerted when CVE-2026-31634 or the next vulnerability affects your stack