CVE-2026-31639

rxrpc: Fix key reference count leak from call->key

published April 24, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix key reference count leak from call->key

When creating a client call in rxrpc_alloc_client_call(), the code obtains

a reference to the key. This is never cleaned up and gets leaked when the

call is destroyed.

Fix this by freeing call->key in rxrpc_destroy_call().

Before the patch, it shows the key reference counter elevated:

$ cat /proc/keys | grep afs@54321

1bffe9cd I--Q--i 8053480 4169w 3b010000 1000 1000 rxrpc afs@54321: ka

$

After the patch, the invalidated key is removed when the code exits:

$ cat /proc/keys | grep afs@54321

$

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-04-24T14:44Z
EPSS history
Timeline
  • 24 APR 14:44Z
    rxrpc: Fix key reference count leak from call->key
    cvelistv5