CVE-2026-31632: rxrpc: Fix leak of rxgk context in rxgk_verify_response()
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix leak of rxgk context in rxgkverifyresponse()
Fix rxgkverifyresponse() to clean up the rxgk context it creates.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.23 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.13 - Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1 - Compensating control
Modify the Linux kernel rxgk_verify_response() function to clean up the rxgk context it creates, preventing the context leak.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31632?
The severity of CVE-2026-31632 is classified as medium due to the risk of resource leaks in the Linux kernel.
How do I fix CVE-2026-31632?
To fix CVE-2026-31632, update your Linux kernel to a version that includes the fix, specifically versions beyond 6.18.23, 6.19.13, or starting from 7.0-rc1.
What versions of the Linux kernel are affected by CVE-2026-31632?
CVE-2026-31632 affects Linux kernel versions between 6.16.1 and 6.18.23 and specific 7.0 release candidates.
Is there a workaround for CVE-2026-31632?
There is no official workaround for CVE-2026-31632; the recommended action is to update to a patched kernel version.
What kind of vulnerability is CVE-2026-31632?
CVE-2026-31632 is a resource leak vulnerability that occurs within the rxgk_verify_response() function of the Linux kernel.