CVE-2026-74646misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, wait_for_completion_interruptible() returns -ERESTARTSYS and fastrpc_internal_invoke() moves every buffer from fl->mmaps onto cctx->invoke_interrupted_mmaps. This list_del()/list_add_tail() walk runs without holding fl->lock, the lock that serialises fl->mmaps in fastrpc_req_mmap() and fastrpc_req_munmap() everywhere else. Take fl->lock around the move, matching every other fl->mmaps accessor.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 25, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc builds before 3f265e405e5ef85030c3777262e18bb556bc8724; from 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc before a902fe1f80f58a2335b6be1131866f827ec44d1a; from 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc before af6345159abcbaa550518f31990d2a9558c2d369; from 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc before efd02f8d1a7449f15809bc18d3cd41aafea75d7e; from 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc before b85a0e91d7d6cd06a53c881a46f749cfcef416a2 | CNA record |
References
- https://git.kernel.org/stable/c/3f265e405e5ef85030c3777262e18bb556bc8724
- https://git.kernel.org/stable/c/a902fe1f80f58a2335b6be1131866f827ec44d1a
- https://git.kernel.org/stable/c/af6345159abcbaa550518f31990d2a9558c2d369
- https://git.kernel.org/stable/c/efd02f8d1a7449f15809bc18d3cd41aafea75d7e
- https://git.kernel.org/stable/c/b85a0e91d7d6cd06a53c881a46f749cfcef416a2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.