CVE-2026-46012

A flaw was found in the Linux kernel's rxrpc subsystem. The rxkad_verify_response() function, which handles verification of responses, did not consistently release allocated memory. This oversight could lead to a memory leak, potentially causing system instability and a denial of service (DoS) over time due to resource exhaustion.

A Moderate impact memory leak flaw was found in the Linux kernel's rxrpc subsystem, affecting Red Hat Enterprise Linux 9 and Red Hat In-Vehicle OS 2. This vulnerability, caused by inconsistent memory release, could allow a local attacker to exhaust system resources, leading to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If the rxrpc kernel module is not actively used, it can be blacklisted to prevent its loading. Create a file /etc/modprobe.d/blacklist-rxrpc.conf containing blacklist rxrpc. A system reboot is required for this change to take effect. Disabling this module may affect services that rely on the rxrpc protocol.