CVE-2026-53160: misc: fastrpc: fix use-after-free race in fastrpc_map_create
In the Linux kernel, the following vulnerability has been resolved:
misc: fastrpc: fix use-after-free race in fastrpcmapcreate
fastrpcmaplookup returns a raw pointer after releasing fl->lock. The caller fastrpcmapcreate then calls fastrpcmapget (krefgetunlesszero) on this unprotected pointer. A concurrent MEMUNMAP can free the map between the lock release and the kref operation, resulting in a use-after-free on the freed slab object.
Restore the takeref parameter to fastrpcmaplookup so the reference is acquired atomically under fl->lock before the pointer is exposed to the caller.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53160?
CVE-2026-53160 has a risk rating of 34.
What type of vulnerability is CVE-2026-53160?
CVE-2026-53160 is categorized as a Use After Free vulnerability.
How does CVE-2026-53160 affect the Linux kernel?
CVE-2026-53160 can lead to potential memory corruption issues due to a race condition in fastrpc_map_create.
How do I fix CVE-2026-53160?
To fix CVE-2026-53160, you should apply the latest patches and updates for your Linux kernel that address this vulnerability.
What components are impacted by CVE-2026-53160?
CVE-2026-53160 impacts the fastrpc subsystem of the Linux kernel.