CVE-2026-53160
In CVE-2026-53160, the Linux kernel misc: fastrpc subsystem had a use-after-free race in fastrpc_map_create. Specifically, fastrpc_map_lookup returned a raw pointer after releasing fl->lock, and the caller then invoked fastrpc_map_get (kref_get_unless_zero) on that unprotected pointer. A concu...