A vulnerability has been found in Linux Kernel up to 6.6.134/6.12.81/6.18.22/6.19.12 and classified as critical. The affected element is the function rxrpc_alloc_client_call of the file /proc/keys. The manipulation leads to improper update of reference count.

This vulnerability is listed as CVE-2026-31639. The attack must be carried out from within the local network. There is no available exploit.

The affected component should be upgraded.