CVE-2024-46741: misc: fastrpc: Fix double free of 'buf' in error path
Vulnerability summary
CVE-2024-46741 is a high (CVSS 7.8) Double Free vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.6% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 13 · Related 11Timeline
- 18-09-2024PublishedVulnerability first disclosed.
- 27-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf' In fastrpc_req_mmap() error path, the fastrpc buffer is freed in fastrpc_req_munmap_impl() if unmap is successful. But in the end, there is an unconditional call to fastrpc_buf_free(). So the above case triggers the double free of fastrpc buf.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu93 products
- linux< 6.8.0-50.51
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1020.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 13327ed95222e70fa98805382b65636b872d87cb, < 4753cc37b6606ef9a7ec22861d380d45e2707f9a | ≥ 72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2, < f77dc8a75859e559f3238a6d906206259227985e | ≥ 72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2, < bfc1704d909dc9911a558b1a5833d3d61a43a1f2 | ≥ 72fa6f7820c4cf96c5f7aabc4e54bdf52d1e2ac2, < e8c276d4dc0e19ee48385f74426aebc855b49aaf | 911737ad0c860251f640a05feb75f9dc7e41f0d7 | b10e064ca0f708c4b4401ac5eab0f76cf7cec93d | ≥ 5.10.267, < 5.11 | ≥ 5.15.218, < 5.16 | 6.2
- linux_kernel≥ 6.2, < 6.6.51 | ≥ 6.7, < 6.10.10 | 6.11:rc1 | 6.11:rc2 | 6.11:rc3 | 6.11:rc4 | 6.11:rc5 | 6.11:rc6
Debian1 product
- linux< 6.10.11-1
3 vendors · 96 products
