CVE detail
CVE-2026-31642
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet->calls list to use list_del_rcu() rather than list_del_init() to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an infinite loop. This, however, means that list_empty() no longer works on an entry that's been deleted from the list, making it harder to detect prior deletion. Fix this by: Firstly, make rxrpc_destroy_all_calls() only dump the first ten calls that are unexpectedly still on the list. Limiting the number of steps means there's no need to call cond_resched() or to remove calls from the list here, thereby eliminating the need for rxrpc_put_call() to check for that. rxrpc_put_call() can then be fixed to unconditionally delete the call from the list as it is the only place that the deletion occurs.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 23.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
9 source links · newest first
Information published.
vendormsrc.microsoft.comApr 26, 2026, 8:05 AMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PMNo excerpt available.
Patchgit.kernel.orgApr 24, 2026, 3:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-53312CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it sh…
- CVE-2026-52965CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure When ttm_tt_swapout() fails, the current c…
- CVE-2026-52933CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a signed compari…
- CVE-2026-52921CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following hash set variants: hash:ip,mark hash:ip,p…
- CVE-2026-46314CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-pro…
- CVE-2026-46146CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with it…