CVE-2026-74646

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> misc: fastrpc: take fl-&gt;lock when moving mmaps on interrupted invoke<br /> <br /> When an invoke is interrupted by a signal,<br /> wait_for_completion_interruptible() returns -ERESTARTSYS and<br /> fastrpc_internal_invoke() moves every buffer from fl-&gt;mmaps onto<br /> cctx-&gt;invoke_interrupted_mmaps. This list_del()/list_add_tail() walk<br /> runs without holding fl-&gt;lock, the lock that serialises fl-&gt;mmaps in<br /> fastrpc_req_mmap() and fastrpc_req_munmap() everywhere else.<br /> <br /> Take fl-&gt;lock around the move, matching every other fl-&gt;mmaps accessor.