{"id":"CVE-2026-31634","title":"rxrpc: fix reference count leak in rxrpc_server_keyring()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: fix reference count leak in rxrpc_server_keyring()\n\nThis patch fixes a reference count leak in rxrpc_server_keyring()\nby checking if rx->securities is already set.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 45d9584e51bdd61faf1900f82666d4ea6a85da72","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < fc76d0bd00850b7372f0a4a319c0c60f80487632","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 9ce36d28f67c2a477a7e2f03480de3f6783fb363","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 12de9e0e0b0b7058be7dfb8a5927eb565bc25780","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 139c750bf06649097d98b0bc41e2a678b4627e27","Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < f125846ee79fcae537a964ce66494e96fa54a6de","Linux 2.6.22"],"published":"2026-04-24","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:47:49.793Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31634","references":[{"url":"https://git.kernel.org/stable/c/45d9584e51bdd61faf1900f82666d4ea6a85da72"},{"url":"https://git.kernel.org/stable/c/fc76d0bd00850b7372f0a4a319c0c60f80487632"},{"url":"https://git.kernel.org/stable/c/c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2"},{"url":"https://git.kernel.org/stable/c/9ce36d28f67c2a477a7e2f03480de3f6783fb363"},{"url":"https://git.kernel.org/stable/c/12de9e0e0b0b7058be7dfb8a5927eb565bc25780"},{"url":"https://git.kernel.org/stable/c/8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a"},{"url":"https://git.kernel.org/stable/c/139c750bf06649097d98b0bc41e2a678b4627e27"},{"url":"https://git.kernel.org/stable/c/f125846ee79fcae537a964ce66494e96fa54a6de"}],"tags":["cve.org"],"epss":0.00129,"epssPercentile":0.02876,"ingestedAt":"2026-09-08T15:33:26.990Z","slug":"CVE-2026-31634","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: fix reference count leak in rxrpc_server_keyring()\n\nThis patch fixes a reference count leak in rxrpc_server_keyring()\nby checking if rx->securities is already set.\n\n## Affected\n\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 45d9584e51bdd61faf1900f82666d4ea6a85da72`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < fc76d0bd00850b7372f0a4a319c0c60f80487632`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < c6d9ea26cf8756ad6f162578e94a5f82f6fae3c2`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 9ce36d28f67c2a477a7e2f03480de3f6783fb363`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 12de9e0e0b0b7058be7dfb8a5927eb565bc25780`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 8ee931c3cd97f1c42b4fbf057f04b9dae45dfb7a`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < 139c750bf06649097d98b0bc41e2a678b4627e27`\n- `Linux >= 17926a79320afa9b95df6b977b40cca6d8713cea < f125846ee79fcae537a964ce66494e96fa54a6de`\n- `Linux 2.6.22`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}