Linux Kernel Vulnerability in RXRPC Call Management

CVE-2026-31642

What is CVE-2026-31642?

A vulnerability in the Linux kernel's RXRPC call management system allows for improper handling of call removals from the rxnet->calls list. The issue arose from using list_del_init() instead of list_del_rcu(), which could lead to reading /proc/net/rxrpc/calls getting stuck in an infinite loop. The resolution involves ensuring that deleted entries are handled more efficiently, making it challenging to detect prior deletions. The fix enhances throughput and stability by limiting the number of calls displayed when unexpected entries remain on the list.

References