Answer in brief
CVE-2026-31642 records a Unknown severity vulnerability in rxrpc: Fix call removal to use RCU safe deletion. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2baec2c3f854d1f79c7bb28386484e144e864a14 <3e47a38e584b905359fe0ce5be5165d1e8592a90 || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <b15b1ce96777b88989a6a4de8d01efbcd81ad2d7 || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <280efb85e9759881a9d31d0874baa04583cb6c09 || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <93fc15be44a35b8e3c58d0238ac0d9b7c53465ff || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <c63abf25203b50243fe228090526f9dbf37727bd || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <3be718f659683ad89fad6f1eb66bee99727cae64 || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <ac5f54691be06a32246179d41be2d73598036deb || >=2baec2c3f854d1f79c7bb28386484e144e864a14 <146d4ab94cf129ee06cd467cb5c71368a6b5bad6 | 3e47a38e584b905359fe0ce5be5165d1e8592a90, b15b1ce96777b88989a6a4de8d01efbcd81ad2d7, 280efb85e9759881a9d31d0874baa04583cb6c09, 93fc15be44a35b8e3c58d0238ac0d9b7c53465ff, c63abf25203b50243fe228090526f9dbf37727bd, 3be718f659683ad89fad6f1eb66bee99727cae64, ac5f54691be06a32246179d41be2d73598036deb, 146d4ab94cf129ee06cd467cb5c71368a6b5bad6 |
| Linux/Linuxgeneric | 4.13 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Apr 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet->calls list to use list_del_rcu() rather than list_del_init() to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an infinite loop. This, however, means that list_empty() no longer works on an entry that's been deleted from the list, making it harder to detect prior deletion. Fix this by: Firstly, make rxrpc_destroy_all_calls() only dump the first ten calls that are unexpectedly still on the list. Limiting the number of steps means there's no need to call cond_resched() or to remove calls from the list here, thereby eliminating the need for rxrpc_put_call() to check for that. rxrpc_put_call() can then be fixed to unconditionally delete the call from the list as it is the only place that the deletion occurs.
Quoted source text, attributed separately from HOL analysis.