CVE-2026-74647

A flaw was found in the Linux kernel's fastrpc component. This race condition occurs when multiple threads concurrently attempt to unmap a buffer. If the buffer is removed from the internal list after its unmap operation has started, it can lead to an inconsistent state. A local attacker could potentially exploit this to cause a denial of service or trigger unpredictable system behavior.

This vulnerability is rated as having a Moderate impact because it requires local access with privileges to interact with the FastRPC subsystem, limiting the blast radius to a localized denial of service rather than arbitrary privilege escalation. In standard Red Hat Enterprise Linux environments, the Qualcomm FastRPC driver is not enabled in kernel builds, preventing exploitation under typical deployments. Systems without the specialized Qualcomm DSP hardware or driver support are not exposed to this race condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.