rxrpc security

About this tag
The rxrpc security tag covers Linux kernel vulnerabilities in the RxRPC networking subsystem, specifically related to authentication and resource management. Recent discussions include CVE-2026-31634, a reference count leak in rxrpc_server_keyring() that affects mixed Windows, Linux, cloud, or container infrastructure, and CVE-2026-31637, a flaw in the rxkad authentication code where failed decryption of response tickets could lead to parsing errors. These issues highlight the importance of patch management for cross-platform environments, even when CVSS scores are pending. The tag is relevant for IT administrators and security teams managing heterogeneous systems.
  1. CVE-2026-31634: Linux RxRPC Reference Count Leak—Why Windows Teams Should Patch

    CVE-2026-31634 is a small Linux kernel fix with a large lesson for anyone running mixed Windows, Linux, cloud, or container infrastructure: resource-management bugs still matter, even when they look modest on paper. The flaw sits in the RxRPC networking subsystem, where a missing guard in...
  2. Linux Kernel CVE-2026-31637: RxRPC RxKAD Ticket Decrypt Error Fix

    Overview CVE-2026-31637 is a Linux kernel vulnerability in the RxRPC security path, specifically in the rxkad authentication code. The issue is small at the code level but important in principle: the kernel attempted to decrypt an RxKAD response ticket, then continued parsing the ticket buffer...