by Kastro
Paper/Archive/CVE-2026-74428

CVE-2026-74428

Linux Linux — rxrpc: Fix double unlock in rxrpc_recvmsg()

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.1.511 × 2010.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.

Affected

ProductAffectedFixed inSource
Linux5800b1cf3fd8ccab752a101865be1e76dac33142 – < 8cd8cf3052fff9a4b86b25734f610e4af03786d38cd8cf3052fff9a4b86b25734f610e4af03786d3CNA
Linux5800b1cf3fd8ccab752a101865be1e76dac33142 – < 1297ae6aeebc3863cb437e42a1bc4cd6173e43d91297ae6aeebc3863cb437e42a1bc4cd6173e43d9CNA
Linux5800b1cf3fd8ccab752a101865be1e76dac33142 – < a2f299b4d5510147fa8629a6aba2869bbcc88aeaa2f299b4d5510147fa8629a6aba2869bbcc88aeaCNA
Linux6.166.18.40CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/8cd8cf3052fff9a4b86b25734f610e4af03786d3refgit.kernel.org/stable/c/1297ae6aeebc3863cb437e42a1bc4cd6173e43d9refgit.kernel.org/stable/c/a2f299b4d5510147fa8629a6aba2869bbcc88aea