Resource Leak in Linux Kernel Affecting RxRPC Functionality

CVE-2026-31639

What is CVE-2026-31639?

A resource leak vulnerability exists in the Linux kernel's RxRPC subsystem, specifically during the client call creation process. When a client call is initiated using the function 'rxrpc_alloc_client_call()', a reference to the key is obtained, but this reference is not properly released when the call is destroyed, leading to a key reference count leak. The issue is resolved in the update where the key is now appropriately freed in 'rxrpc_destroy_call()', ensuring that the reference count does not remain elevated unnecessarily. This fix prevents potential resource exhaustion and enhances the stability of the RxRPC functionality in the Linux kernel.

References