CVE-2026-74431

A flaw was found in the Linux kernel's rxrpc network protocol implementation. This vulnerability could allow an attacker to trigger an infinite loop within the rxrpc_recvmsg() function by manipulating out-of-band (OOB) queue handling. This could lead to a Denial of Service (DoS) condition, making the system unresponsive.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires a local user to invoke AF_RXRPC socket operations, resulting in a localized denial of service without compromising system confidentiality or integrity. The affected subsystem provides transport support primarily for AFS file sharing and is not utilized in standard enterprise deployments. Consequently, typical systems that do not interact with or autoload this network protocol face minimal operational risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.