Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31643

rxrpc: Fix key parsing memleak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key parsing memleak In rxrpc_preparse_xdr_yfs_rxgk(), the memory attached to token->rxgk can be leaked in a few error paths after it's allocated. Fix this by freeing it in the "reject_token:" case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 to < d5f76f812d2c0ea6dd651b0586be49e85ecca085affected
  • 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 to < 01f51318feb626deee1d0c8a190198cd7857d599affected
  • 0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 to < b555912b9b21075e8298015f888ffe3ff60b1a97affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.23 to ≤ 6.18.*unaffected
  • 6.19.13 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References