CVE-2026-74432: rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix leak of released call in recvmsg(MSGPEEK)
Fix rxrpcrecvmsg() to also drop the ref it holds on an already-released call if MSGPEEK is in force (the function holds a ref on the call irrespective of whether MSGPEEK is specified or not).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74432?
CVE-2026-74432 has a risk rating of 12, indicating a critical severity level.
How do I fix CVE-2026-74432?
To fix CVE-2026-74432, update your Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2026-74432?
CVE-2026-74432 affects the Linux kernel versions prior to the release of the patch.
What happens if I don't address CVE-2026-74432?
If CVE-2026-74432 is not addressed, it may lead to memory leaks and potential performance issues in applications using the rxrpc protocol.
Is CVE-2026-74432 a remote exploit risk?
CVE-2026-74432 can potentially be exploited remotely, making it critical to apply the necessary updates.