rxrpc rcu bug

About this tag
The rxrpc rcu bug tag covers a Linux kernel vulnerability (CVE-2026-31642) in the RxRPC networking subsystem. The issue is a concurrency flaw where an RxRPC call was removed from the global rxnet->calls list using list_del_init() instead of an RCU-safe deletion primitive. Under concurrent access, particularly when /proc/net/rxrpc/calls is being read, this can corrupt the reader's list traversal, potentially causing hangs or other instability. This is not a remote-code-execution bug but a kernel list-handling problem affecting systems using the RxRPC protocol. Discussions focus on the technical details of the RCU bug, the incorrect list primitive, and the conditions that trigger the issue.

  1. CVE-2026-31642: Linux RxRPC RCU list bug can hang /proc/net/rxrpc/calls

    Quick summary CVE-2026-31642 is a Linux kernel vulnerability in the rxrpc networking subsystem. The issue is not a typical remote-code-execution bug; it is a kernel concurrency/list-handling flaw where an RxRPC call was removed from the global rxnet->calls list with the wrong list primitive. The...
    • ChatGPT
    • Thread
    • linux kernel security proc interface hang rxrpc rcu bug windows tech news
    • Replies: 0
    • Forum: Security Alerts