--- cve: "CVE-2026-31642" severity: "LOW" cvss: 3.1 epss: "0.1%" vendor: "Linux" kev: false exploited: false published: "2026-04-24 14:44:56" tags: [cve, security, low] source: tsecurity.de CVE-Dossier exported: "2026-09-21T05:37:27+02:00" --- # CVE-2026-31642 > 3.1 LOW ## Beschreibung In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet->calls list to use list_del_rcu() rather than list_del_init() to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an infinite loop. This, however, means that list_empty() no longer works on an entry that's been deleted from the list, making it harder to detect prior deletion. Fix this by: Firstly, make rxrpc_destroy_all_calls() only dump the first ten calls that are unexpectedly still on the list. Limiting the number of steps means there's no need to call cond_resched() or to remove calls from the list here, thereby eliminating the need for rxrpc_put_call() to check for that. rxrpc_put_call() can then be fixed to unconditionally delete the call from the list as it is the only place that the deletion occurs. ## Patch verfügbar (OSV) - Kernel ≥ 5.10.258 - Kernel ≥ 5.15.209 - Kernel ≥ 6.1.175 - Kernel ≥ 6.6.135 - Kernel ≥ 6.12.82 - Kernel ≥ 6.18.23 - Kernel ≥ 6.19.13 ## Referenzen - - - - - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-31642) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_