Memory Leak in Linux Kernel's rxrpc: Vulnerability in Key Parsing

CVE-2026-31643

What is CVE-2026-31643?

A memory leak vulnerability has been identified in the Linux kernel's rxrpc module. Specifically, in the function rxrpc_preparse_xdr_yfs_rxgk(), memory allocated for the token's rxgk could be improperly freed due to certain error paths during execution. This oversight can lead to increased memory consumption, potentially affecting system performance and stability. The vulnerability has been addressed by ensuring that the memory is correctly released in the 'reject_token' scenario, thereby improving the overall reliability of the kernel.

References