https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:13:36 +0000 https://cve.radiocsirt.org/vuln/cve-2026-31730 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>misc: fastrpc: possible double-free of cctx-&gt;remote_heap</p> <p>fastrpc_init_create_static_process() may free cctx-&gt;remote_heap on the err_map path but does not clear the pointer. Later, fastrpc_rpmsg_remove() frees cctx-&gt;remote_heap again if it is non-NULL, which can lead to a double-free if the INIT_CREATE_STATIC ioctl hits the error path and the rpmsg device is subsequently removed/unbound. Clear cctx-&gt;remote_heap after freeing it in the error path to prevent the later cleanup from freeing it again.</p> <p>This issue was found by an in-house analysis workflow that extracts AST-based information and runs static checks, with LLM assistance for triage, and was confirmed by manual code review. No hardware testing was performed.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>misc: fastrpc: possible double-free of cctx-&gt;remote_heap</p> <p>fastrpc_init_create_static_process() may free cctx-&gt;remote_heap on the err_map path but does not clear the pointer. Later, fastrpc_rpmsg_remove() frees cctx-&gt;remote_heap again if it is non-NULL, which can lead to a double-free if the INIT_CREATE_STATIC ioctl hits the error path and the rpmsg device is subsequently removed/unbound. Clear cctx-&gt;remote_heap after freeing it in the error path to prevent the later cleanup from freeing it again.</p> <p>This issue was found by an in-house analysis workflow that extracts AST-based information and runs static checks, with LLM assistance for triage, and was confirmed by manual code review. No hardware testing was performed.</p> https://cve.radiocsirt.org/vuln/cve-2026-31730