misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke (Linux Linux)

CVE-2026-74646
HIGH 7.8

En bref

Source
NVD
EPSS
EPSS 0.18 % · centile 7 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, wait_for_completion_interruptible() returns -ERESTARTSYS and fastrpc_internal_invoke() moves every buffer from fl->mmaps onto cctx->invoke_interrupted_mmaps. This list_del()/list_add_tail() walk runs without holding fl->lock, the lock that serialises fl->mmaps in fastrpc_req_mmap() and fastrpc_req_munmap() everywhere else. Take fl->lock around the move, matching every other fl->mmaps accessor.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc < 3f265e405e5ef85030c3777262e18bb556bc8724 ; affected 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc < a902fe1f80f58a2335b6be1131866f827ec44d1a ; affected 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc < af6345159abcbaa550518f31990d2a9558c2d369 ; affected 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc < efd02f8d1a7449f15809bc18d3cd41aafea75d7e ; affected 76e8e4ace1ed2c97dba3b1370e0e105e07c572bc < b85a0e91d7d6cd06a53c881a46f749cfcef416a2
Linux · Linuxaffected 6.2 ; unaffected 0 < 6.2 ; unaffected 6.6.152 ≤ 6.6.* ; unaffected 6.12.104 ≤ 6.12.* ; unaffected 6.18.45 ≤ 6.18.* ; unaffected 7.1.9 ≤ 7.1.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD