CVE-2026-31643

Summary

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix key parsing memleak

In rxrpc_preparse_xdr_yfs_rxgk(), the memory attached to token->rxgk can be leaked in a few error paths after it's allocated.

Fix this by freeing it in the "reject_token:" case.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 < d5f76f812d2c0ea6dd651b0586be49e85ecca085affected
LinuxLinux0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 < 01f51318feb626deee1d0c8a190198cd7857d599affected
LinuxLinux0ca100ff4df64f5d0f6c1dd5080c3e096786bea6 < b555912b9b21075e8298015f888ffe3ff60b1a97affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.23 <= 6.18.*unaffected
LinuxLinux6.19.13 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References