CVE-2026-74432 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released call if MSG_PEEK is in force (the function holds a ref on the call irrespective of whether MSG_PEEK is specified or not).

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84
https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5
https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c
https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51
https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) Fix rxrpc_recvmsg() to also drop the ref it holds on an already-released call if MSG_PEEK is in force (the function holds a ref on the call irrespective of whether MSG_PEEK is specified or not).
Title		rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84 https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5 https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51 https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:59:32.207Z

Updated: 2026-08-15T05:59:32.207Z

Reserved: 2026-08-15T05:44:03.896Z

Link: CVE-2026-74432

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:45.317

Modified: 2026-08-15T06:22:45.317

Link: CVE-2026-74432

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74432", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.896Z", "datePublished": "2026-08-15T05:59:32.207Z", "dateUpdated": "2026-08-15T05:59:32.207Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:59:32.207Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix leak of released call in recvmsg(MSG_PEEK)\n\nFix rxrpc_recvmsg() to also drop the ref it holds on an already-released\ncall if MSG_PEEK is in force (the function holds a ref on the call\nirrespective of whether MSG_PEEK is specified or not)."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rxrpc/recvmsg.c"], "versions": [{"version": "7692bde890061797f3dece0148d7859e85c55778", "lessThan": "86eff3140c9d4b52bba13d1cba266da933403e51", "status": "affected", "versionType": "git"}, {"version": "839fe96c15209dc2255c064bb44b636efe04f032", "lessThan": "e473cd3046a1aaec1e39af5df2042ce7c04d5e74", "status": "affected", "versionType": "git"}, {"version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "lessThan": "2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5", "status": "affected", "versionType": "git"}, {"version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "lessThan": "04c7103dc0923cc6ac95b97aa66bab70da7ace84", "status": "affected", "versionType": "git"}, {"version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "lessThan": "4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c", "status": "affected", "versionType": "git"}, {"version": "6c75a97a32a5fa2060c3dd30207e63b6914b606d", "status": "affected", "versionType": "git"}, {"version": "6.6.100", "lessThan": "6.6.145", "status": "affected", "versionType": "semver"}, {"version": "6.12.40", "lessThan": "6.12.97", "status": "affected", "versionType": "semver"}, {"version": "6.15.8", "lessThan": "6.16", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rxrpc/recvmsg.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.100", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.40", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2-rc1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15.8"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51"}, {"url": "https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74"}, {"url": "https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5"}, {"url": "https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84"}, {"url": "https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c"}], "title": "rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/rxrpc/recvmsg.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "86eff3140c9d4b52bba13d1cba266da933403e51", "status": "affected", "version": "7692bde890061797f3dece0148d7859e85c55778", "versionType": "git"}, {"lessThan": "e473cd3046a1aaec1e39af5df2042ce7c04d5e74", "status": "affected", "version": "839fe96c15209dc2255c064bb44b636efe04f032", "versionType": "git"}, {"lessThan": "2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5", "status": "affected", "version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "versionType": "git"}, {"lessThan": "04c7103dc0923cc6ac95b97aa66bab70da7ace84", "status": "affected", "version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "versionType": "git"}, {"lessThan": "4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c", "status": "affected", "version": "962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc", "versionType": "git"}, {"status": "affected", "version": "6c75a97a32a5fa2060c3dd30207e63b6914b606d", "versionType": "git"}, {"lessThan": "6.6.145", "status": "affected", "version": "6.6.100", "versionType": "semver"}, {"lessThan": "6.12.97", "status": "affected", "version": "6.12.40", "versionType": "semver"}, {"lessThan": "6.16", "status": "affected", "version": "6.15.8", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/rxrpc/recvmsg.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix leak of released call in recvmsg(MSG_PEEK)\n\nFix rxrpc_recvmsg() to also drop the ref it holds on an already-released\ncall if MSG_PEEK is in force (the function holds a ref on the call\nirrespective of whether MSG_PEEK is specified or not)."}], "id": "CVE-2026-74432", "lastModified": "2026-08-15T06:22:45.317", "metrics": {}, "published": "2026-08-15T06:22:45.317", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/04c7103dc0923cc6ac95b97aa66bab70da7ace84"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2b69b61057eb0b3db9ad754ef0f1436b7af3a9f5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4bdb9e471f5b1ac9cbe4add5de7ff085a0ec303c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/86eff3140c9d4b52bba13d1cba266da933403e51"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e473cd3046a1aaec1e39af5df2042ce7c04d5e74"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}