CVE-2026-31639
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key When creating a client call in rxrpc_alloc_client_call(), the code obtains a reference to the key. This is never cleaned up and gets leaked when the call is destroyed. Fix this by freeing call->key in rxrpc_destroy_call(). Before the patch, it shows the key reference counter elevated: $ cat /proc/keys | grep afs@54321 1bffe9cd I--Q--i 8053480 4169w 3b010000 1000 1000 rxrpc afs@54321: ka $ After the patch, the invalidated key is removed when the code exits: $ cat /proc/keys | grep afs@54321 $
How to fix
- linux linux_kernel6.6.135, 6.12.82, 6.18.23, 6.19.13 or later
- git.kernel.org/stable/c/2e6ef713b1598f6acd7f302fa6b12b6731c89914
- git.kernel.org/stable/c/978108902ee4ef2b348ff7ec36ad014dc5bc6dc6
- git.kernel.org/stable/c/d666540d217e8d420544ebdfbadeedd623562733
- git.kernel.org/stable/c/e6b7943c5dc875647499da09bf4d50a8557ab0c3
- git.kernel.org/stable/c/f1a7a3ab0f35f83cf11bba906b9e948cf3788c28
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.2.1 ≤ v < 6.6.135, 6.7 ≤ v < 6.12.82, 6.13 ≤ v < 6.18.23, 6.19 ≤ v < 6.19.13, 6.2, 7.0 | 6.6.135, 6.12.82, 6.18.23, 6.19.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.