CVE-2026-74429
Received Received - Intake

Linux Kernel rxrpc Remote Memory Corruption

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpc_receiving_reply() to handle the reception of an apparent reply DATA packet before rxrpc has had a chance to send any request DATA packets on a client call by checking to see if the call has been exposed yet by sending the first packet. Without this, rxrpc_rotate_tx_window() might oops. Also fix rxrpc_rotate_tx_window() to handle the Tx queue being empty by changing the do...while loop into a while loop, just in case a call is abnormally terminated by an early reply before the last request packet is transmitted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74429
EUVD
EUVD-2026-59576

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the rxrpc module where a reply packet could be received before data transmission begins. This causes a null pointer dereference in rxrpc_rotate_tx_window(), leading to a kernel oops (crash). The issue arises when a reply is processed before the first request packet is sent, exposing the call prematurely.

Detection Guidance

This vulnerability affects the Linux kernel's rxrpc subsystem and may cause kernel oopses under specific conditions. Detection requires checking kernel logs for rxrpc-related errors or oopses, particularly after network operations involving rxrpc services. Use commands like dmesg | grep rxrpc or journalctl -k | grep rxrpc to inspect kernel logs for related errors.

Impact Analysis

This vulnerability can cause system crashes (kernel oops) on affected Linux systems using the rxrpc module. If exploited, it may lead to denial of service, requiring a reboot to restore normal operation. Systems relying on rxrpc for network communication could experience instability.

Mitigation Strategies

Apply the latest kernel updates provided by your Linux distribution to patch this vulnerability. If immediate patching is not possible, consider disabling rxrpc services if they are not required, using systemctl disable rxrpc or similar commands. Monitor kernel logs for signs of exploitation or instability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74429. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart