CVE-2026-74646

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74646
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74646.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74646
Downstream
Published
2026-08-22T15:32:23Z
Modified
2026-08-27T11:30:40Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Details

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

When an invoke is interrupted by a signal, wait_for_completion_interruptible() returns -ERESTARTSYS and fastrpc_internal_invoke() moves every buffer from fl->mmaps onto cctx->invoke_interrupted_mmaps. This list_del()/list_add_tail() walk runs without holding fl->lock, the lock that serialises fl->mmaps in fastrpc_req_mmap() and fastrpc_req_munmap() everywhere else.

Take fl->lock around the move, matching every other fl->mmaps accessor.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74646.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
76e8e4ace1ed2c97dba3b1370e0e105e07c572bc
Fixed
3f265e405e5ef85030c3777262e18bb556bc8724
Fixed
a902fe1f80f58a2335b6be1131866f827ec44d1a
Fixed
af6345159abcbaa550518f31990d2a9558c2d369
Fixed
efd02f8d1a7449f15809bc18d3cd41aafea75d7e
Fixed
b85a0e91d7d6cd06a53c881a46f749cfcef416a2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74646.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.152
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.104
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.45
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74646.json"