---
id: CVE-2026-74432
title: 'rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

  Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released
  call if MSG_PEEK is in force (the functi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7692bde890061797f3dece0148d7859e85c55778 <
    86eff3140c9d4b52bba13d1cba266da933403e51
  - >-
    Linux >= 839fe96c15209dc2255c064bb44b636efe04f032 <
    e473cd3046a1aaec1e39af5df2042ce7c04d5e74
  - >-
    Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc <
    2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5
  - >-
    Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc <
    04c7103dc0923cc6ac95b97aa66bab70da7ace84
  - >-
    Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc <
    4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c
  - Linux 4aed0eeca58e26d752bb08b293b8dc75c6820b23
  - Linux cb720b068b18fb39c96980eb3c13f09427512be7
  - Linux 6c75a97a32a5fa2060c3dd30207e63b6914b606d
  - Linux >= 6.6.100 < 6.6.145
  - Linux >= 6.12.40 < 6.12.97
  - Linux >= 5.10.266 < 5.11
  - Linux >= 6.1.191 < 6.2
  - Linux >= 6.15.8 < 6.16
  - Linux 6.16
published: '2026-08-15'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:30:02.873Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74432'
references:
  - url: 'https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51'
  - url: 'https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74'
  - url: 'https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5'
  - url: 'https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84'
  - url: 'https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c'
tags:
  - cve.org
epss: 0.00209
epssPercentile: 0.11081
ingestedAt: '2026-11-05T15:02:32.551Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released
call if MSG_PEEK is in force (the function holds a ref on the call
irrespective of whether MSG_PEEK is specified or not).

## Affected

- `Linux >= 7692bde890061797f3dece0148d7859e85c55778 < 86eff3140c9d4b52bba13d1cba266da933403e51`
- `Linux >= 839fe96c15209dc2255c064bb44b636efe04f032 < e473cd3046a1aaec1e39af5df2042ce7c04d5e74`
- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5`
- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 04c7103dc0923cc6ac95b97aa66bab70da7ace84`
- `Linux >= 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc < 4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c`
- `Linux 4aed0eeca58e26d752bb08b293b8dc75c6820b23`
- `Linux cb720b068b18fb39c96980eb3c13f09427512be7`
- `Linux 6c75a97a32a5fa2060c3dd30207e63b6914b606d`
- `Linux >= 6.6.100 < 6.6.145`
- `Linux >= 6.12.40 < 6.12.97`
- `Linux >= 5.10.266 < 5.11`
- `Linux >= 6.1.191 < 6.2`
- `Linux >= 6.15.8 < 6.16`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.