rxrpc: Fix key reference count leak from call->key

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2026-31639
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-04-24 15:16:43 UTC
Updated2026-04-24 17:51:40 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key When creating a client call in rxrpc_alloc_client_call(), the code obtains a reference to the key. This is never cleaned up and gets leaked when the call is destroyed. Fix this by freeing call->key in rxrpc_destroy_call(). Before the patch, it shows the key reference counter elevated: $ cat /proc/keys | grep afs@54321 1bffe9cd I--Q--i 8053480 4169w 3b010000 1000 1000 rxrpc afs@54321: ka $ After the patch, the invalidated key is removed when the code exits: $ cat /proc/keys | grep afs@54321 $

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected f3441d4125fc98995858550a5521b8d7daf0504a f1a7a3ab0f35f83cf11bba906b9e948cf3788c28 git Not specified
CNA Linux Linux affected f3441d4125fc98995858550a5521b8d7daf0504a e6b7943c5dc875647499da09bf4d50a8557ab0c3 git Not specified
CNA Linux Linux affected f3441d4125fc98995858550a5521b8d7daf0504a 2e6ef713b1598f6acd7f302fa6b12b6731c89914 git Not specified
CNA Linux Linux affected f3441d4125fc98995858550a5521b8d7daf0504a 978108902ee4ef2b348ff7ec36ad014dc5bc6dc6 git Not specified
CNA Linux Linux affected f3441d4125fc98995858550a5521b8d7daf0504a d666540d217e8d420544ebdfbadeedd623562733 git Not specified
CNA Linux Linux affected 6.2 Not specified
CNA Linux Linux unaffected 6.2 semver Not specified
CNA Linux Linux unaffected 6.6.135 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.82 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.23 6.18.* semver Not specified
CNA Linux Linux unaffected 6.19.13 6.19.* semver Not specified
CNA Linux Linux unaffected 7.0 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/978108902ee4ef2b348ff7ec36ad014dc5bc6dc6 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d666540d217e8d420544ebdfbadeedd623562733 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/f1a7a3ab0f35f83cf11bba906b9e948cf3788c28 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/2e6ef713b1598f6acd7f302fa6b12b6731c89914 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e6b7943c5dc875647499da09bf4d50a8557ab0c3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report