{"id":"CVE-2026-74432","title":"rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix leak of released call in recvmsg(MSG_PEEK)\n\nFix rxrpc_recvmsg() to also drop the ref it holds on an already-released\ncall if MSG_PEEK is in force (the functi…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7692bde890061797f3dece0148d7859e85c55778 < 86eff3140c9d4b52bba13d1cba266da933403e51","Linux >= 839fe96c15209dc2255c064bb44b636efe04f032 < e473cd3046a1aaec1e39af5df2042ce7c04d5e74","Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5","Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 04c7103dc0923cc6ac95b97aa66bab70da7ace84","Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c","Linux 4aed0eeca58e26d752bb08b293b8dc75c6820b23","Linux cb720b068b18fb39c96980eb3c13f09427512be7","Linux 6c75a97a32a5fa2060c3dd30207e63b6914b606d","Linux >= 6.6.100 < 6.6.145","Linux >= 6.12.40 < 6.12.97","Linux >= 5.10.266 < 5.11","Linux >= 6.1.191 < 6.2","Linux >= 6.15.8 < 6.16","Linux 6.16"],"published":"2026-08-15","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:30:02.873Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-74432","references":[{"url":"https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51"},{"url":"https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74"},{"url":"https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5"},{"url":"https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84"},{"url":"https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c"}],"tags":["cve.org"],"epss":0.00209,"epssPercentile":0.11081,"ingestedAt":"2026-11-05T15:02:32.551Z","slug":"CVE-2026-74432","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix leak of released call in recvmsg(MSG_PEEK)\n\nFix rxrpc_recvmsg() to also drop the ref it holds on an already-released\ncall if MSG_PEEK is in force (the function holds a ref on the call\nirrespective of whether MSG_PEEK is specified or not).\n\n## Affected\n\n- `Linux >= 7692bde890061797f3dece0148d7859e85c55778 < 86eff3140c9d4b52bba13d1cba266da933403e51`\n- `Linux >= 839fe96c15209dc2255c064bb44b636efe04f032 < e473cd3046a1aaec1e39af5df2042ce7c04d5e74`\n- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5`\n- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 04c7103dc0923cc6ac95b97aa66bab70da7ace84`\n- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c`\n- `Linux 4aed0eeca58e26d752bb08b293b8dc75c6820b23`\n- `Linux cb720b068b18fb39c96980eb3c13f09427512be7`\n- `Linux 6c75a97a32a5fa2060c3dd30207e63b6914b606d`\n- `Linux >= 6.6.100 < 6.6.145`\n- `Linux >= 6.12.40 < 6.12.97`\n- `Linux >= 5.10.266 < 5.11`\n- `Linux >= 6.1.191 < 6.2`\n- `Linux >= 6.15.8 < 6.16`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}