Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: -misc: fastrpc: fix memory corruption on probe A missing sanity check has been added to the count of probed sessions, to prevent memory corruption beyond the fixed-size slab-alocation session array when there are more than...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: misc: fastrpc: Do not remove the map from createprocess and devicerelease. Do not remove the map from the list during the error handling in fastrpcinitcreateprocess. Instead, call fastrpcmapput to avoid a use-after-free...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback A NULL pointer dereference was observed on Hawi at boot when the DSP sends a glink message before fastrpcrpmsgprobe has completed initialization: Unable to handle kern...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpcputargs Failure of copytouser results in an early return without properly cleaning up the fdlist; this has been updated by the DSP. This may lead to a map leak. The fix involves...

Astra Linux - vulnerability in linux

An issue was discovered in the Linux kernel up to version 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c fails to prevent user applications from sending kernel RPC messages, specifically CID-20c40794eb85. This is a related issue to CVE-2019-2308...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fixed a use-after-free race condition for maps It is possible that before fastrpcfreemap is called, another thread may call fastrpcmaplookup and obtain a reference to a map that is about to be deleted. The function...

CVE-2026-57554

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

CVE-2026-57554 Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

EUVD-2026-92982

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

CVE-2026-57554 Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

CVE-2026-57554

A Use After Free vulnerability exists in the DSP Service due to a memory corruption issue. This occurs when asynchronous threads simultaneously access shared performance counter data during FastRPC invocations . The vulnerability has a High base severity (CVSS 3.1 score of 7.8) and can impact con...

PT-2026-106356

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. FastRPC is a remote procedur...

CVE-2026-57554: Use After Free

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput on failed usercopy If the copy back to userland fails for the FASTRPCIOCTLALLOCDMABUFF ioctl, we should not assume that ‘buf-dmabuf’ is still valid. In fact, dmabuffd calls fdinstall before, there...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The overflow check in the probe session-duplication function increased the session count, even when there were no more available sessions. This could lead to corruption of memory beyon...

fastrpc_get_args() function Heap Buffer Overflow DoS

The vulnerability in the fastrpcgetargs function within the drivers/misc/fastrpc.c module of the Linux kernel is related to a potential integer overflow. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and availability of protected...

SUSE CVE-2026-74647

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unmap operation fastrpcreqmunmapimpl is called to unmap any buffer. The buffer is getting removed from the list after it is unmapped from DSP. This can create potential race...

CVE-2026-74647

A flaw was found in the Linux kernel's fastrpc component. This race condition occurs when multiple threads concurrently attempt to unmap a buffer. If the buffer is removed from the internal list after its unmap operation has started, it can lead to an inconsistent state. A local attacker could...

CVE-2026-74646

A flaw was found in the Linux kernel's fastrpc subsystem. When an invoke operation is interrupted by a signal, the fastrpcinternalinvoke function moves memory mappings without properly holding the fl-lock. This missing lock during memory map manipulation creates a race condition, which could lead...

SUSE CVE-2026-74646

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl-lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, waitforcompletioninterruptible returns -ERESTARTSYS and fastrpcinternalinvoke moves every buffer from fl-mmaps onto...