CVE-2026-74431

Received Received - Intake

rxrpc_recvmsg() Infinite Loop in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_recvmsg() Fix the wait in rxrpc_recvmsg() also take check the oob queue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74431

EUVD

EUVD-2026-59578

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a potential infinite loop in the rxrpc_recvmsg() function could occur due to improper handling of the out-of-band (OOB) queue. The fix ensures the wait condition also checks the OOB queue to prevent the loop from continuing indefinitely.

Detection Guidance

This vulnerability is specific to the Linux kernel's rxrpc module and involves a potential infinite loop in rxrpc_recvmsg(). Detection requires checking for kernel logs or system hangs related to rxrpc operations. Monitor kernel logs for warnings or errors using dmesg or journalctl commands.

Impact Analysis

This vulnerability could lead to system hangs or denial-of-service conditions if exploited, as the infinite loop may consume excessive CPU resources. It primarily affects systems using the rxrpc protocol for network communication.

Mitigation Strategies

Update the Linux kernel to the patched version that includes the fix for rxrpc_recvmsg() to prevent potential infinite loops.

Hi! I’m here to help you understand CVE-2026-74431. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70