-

CVE-2026-74432

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released
call if MSG_PEEK is in force (the function holds a ref on the call
irrespective of whether MSG_PEEK is specified or not).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 7692bde890061797f3dece0148d7859e85c55778
Version < 86eff3140c9d4b52bba13d1cba266da933403e51
Status affected
Version 839fe96c15209dc2255c064bb44b636efe04f032
Version < e473cd3046a1aaec1e39af5df2042ce7c04d5e74
Status affected
Version 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc
Version < 2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5
Status affected
Version 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc
Version < 04c7103dc0923cc6ac95b97aa66bab70da7ace84
Status affected
Version 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc
Version < 4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c
Status affected
Version 4aed0eeca58e26d752bb08b293b8dc75c6820b23
Status affected
Version 6c75a97a32a5fa2060c3dd30207e63b6914b606d
Status affected
Version 6.6.100
Version < 6.6.145
Status affected
Version 6.12.40
Version < 6.12.97
Status affected
Version 5.10.266
Version < 5.11
Status affected
Version 6.15.8
Version < 6.16
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.053
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51
https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74
https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5
https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84
https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c