CVE-2026-74429

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rxrpc component where the rxrpc receiving reply() function fails to properly handle the reception of a reply DATA packet before any request DATA packets have been sent on a client call. This occurs when the system does not verify if the call has been exposed by the transmission of the first packet. Consequently, the rxrpc rotate tx window() function may trigger an oops, which is a kernel panic or error indicating a failure in the kernel's operation. Additionally, the rxrpc rotate tx window() function contains a loop structure that does not correctly handle cases where the Tx queue is empty, which can happen if a call is terminated prematurely by an early reply before the final request packet is sent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.