CVE-2026-74647

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> misc: fastrpc: Remove buffer from list prior to unmap operation<br /> <br /> fastrpc_req_munmap_impl() is called to unmap any buffer. The buffer is<br /> getting removed from the list after it is unmapped from DSP. This can<br /> create potential race conditions if multiple threads invoke unmap<br /> concurrently, where one thread may remove the entry from the list while<br /> another thread&amp;#39;s unmap operation is still ongoing.<br /> <br /> Fix this by removing the buffer entry from the list before calling the<br /> unmap operation. If the unmap fails, the entry is re-added to the list<br /> so that userspace can retry the unmap, or alternatively, the buffer<br /> will be cleaned up during device release when the DSP process is torn<br /> down and all DSP-side mappings are freed along with remaining buffers<br /> in the list.