CVE-2026-74432

A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg() function is called with the MSG_PEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Service (DoS) by exhausting system resources.

This vulnerability is rated as Low severity because local access is required to invoke specific socket inspection operations, and the resulting memory leak is limited to denial-of-service conditions through resource exhaustion without enabling code execution or data leakage. The affected rxrpc protocol module is not loaded by default in standard Red Hat deployments unless explicitly loaded by the administrator or required by network filesystems such as AFS. Consequently, systems running default configurations without active RxRPC networking are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.