CVE-2026-31642

A flaw was found in the Linux kernel's rxrpc module. This vulnerability occurs due to incorrect handling of call removal, specifically using list_del_init() instead of list_del_rcu(). A local user reading the /proc/net/rxrpc/calls file could potentially trigger an infinite loop, leading to a Denial of Service (DoS) condition.

Call teardown must use RCU-safe list deletion in rxrpc; upstream replaces list_del_init with RCU primitives. Red Hat recommends kernel errata for rxrpc-enabled systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.