6 matches found
CVE-2025-68252
CVE-2025-68252: In the Linux kernel misc: fastrpc component, a reference to a dma_buf obtained via dma_buf_get in fastrpc_map_lookup was not released on all return paths, causing a dma_buf memory leak. The fix adds dma_buf_put before returning (ensuring the temporary reference is released whether...
CVE-2022-48874
A vulnerability was found in the Linux kernel's fastrpc.c driver. A race condition is possible between the time that the fastrpcmaplookup function unlocks a mutex and the reference count is increased by the fastrpcmapget function in the fastrpcmapfind function. This race condition could result in...
CVE-2022-48874
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...
CVE-2022-48874 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...
CVE-2022-48874 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...
CVE-2022-48874 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpcmapfind Currently, there is a race window between the point when the mutex is unlocked in fastrpcmaplookup and the reference count increasing fastrpcmapget in fastrpcmapfind,...