CVE-2026-31638

A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability occurs when the system processes a packet intended for a client after the client's call on the channel has already been terminated. An attacker could exploit this protocol error path, which improperly handles call references, to trigger a kernel crash, leading to a Denial of Service (DoS).

RxRPC client path could put a call reference that was never taken when packets arrive after teardown; upstream balances refcounting. Red Hat advises patched kernels for AFS/rxrpc client workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.