CVE-2026-31643

rxrpc: Fix key parsing memleak

published April 24, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix key parsing memleak

In rxrpc_preparse_xdr_yfs_rxgk(), the memory attached to token->rxgk can be

leaked in a few error paths after it's allocated.

Fix this by freeing it in the "reject_token:" case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-04-24T14:44Z
EPSS history
Timeline
  • 24 APR 14:44Z
    rxrpc: Fix key parsing memleak
    cvelistv5