CVE Catalog

CVE-2026-74431

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

27th percentile - higher than 27% of all known CVEs

Summary

In the Linux kernel's rxrpc subsystem, rxrpc_recvmsg() may enter an infinite loop because the wait does not check the OOB queue. The fix adds a check for the OOB queue in the wait loop.

Risk Assessment

The risk includes process or system hang due to infinite loop, which could lead to denial of service.

Recommendation

Update the kernel to a version containing the fix that includes the OOB queue in the wait condition.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_recvmsg() Fix the wait in rxrpc_recvmsg() also take check the oob queue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS