Riskcovery

CVE-2026-74646

misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

State
Published
Severity
7.8 High
Published
Aug 22, 2026
Updated
Aug 25, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

When an invoke is interrupted by a signal, wait_for_completion_interruptible() returns -ERESTARTSYS and fastrpc_internal_invoke() moves every buffer from fl->mmaps onto cctx->invoke_interrupted_mmaps. This list_del()/list_add_tail() walk runs without holding fl->lock, the lock that serialises fl->mmaps in fastrpc_req_mmap() and fastrpc_req_munmap() everywhere else.

Take fl->lock around the move, matching every other fl->mmaps accessor.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc to before 3f265e405e5ef85030c3777262e18bb556bc8724Affected
  • 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc to before a902fe1f80f58a2335b6be1131866f827ec44d1aAffected
  • 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc to before af6345159abcbaa550518f31990d2a9558c2d369Affected
  • 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc to before efd02f8d1a7449f15809bc18d3cd41aafea75d7eAffected
  • 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc to before b85a0e91d7d6cd06a53c881a46f749cfcef416a2Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.152 through 6.6.*Not affected
  • 6.12.104 through 6.12.*Not affected
  • 6.18.45 through 6.18.*Not affected
  • 7.1.9 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.