---
id: CVE-2024-46741
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  misc: fastrpc: Fix double free of 'buf' in error path

  smatch warning:
  drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf'

  In fastrpc_req_mmap()…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  misc: fastrpc: Fix double free of 'buf' in error path

  smatch warning:
  drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf'

  In fastrpc_req_mmap()…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-415
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.2, < 6.6.51'
  - 'linux_kernel >= 6.7, < 6.10.10'
  - linux_kernel = 6.11
patched:
  - linux_kernel 6.10.10
published: '2024-09-18'
updated: '2026-08-27'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-46741'
references:
  - url: 'https://git.kernel.org/stable/c/4753cc37b6606ef9a7ec22861d380d45e2707f9a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bfc1704d909dc9911a558b1a5833d3d61a43a1f2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e8c276d4dc0e19ee48385f74426aebc855b49aaf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f77dc8a75859e559f3238a6d906206259227985e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46741.json
  - url: 'https://access.redhat.com/security/cve/CVE-2024-46741'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2313089'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-46741'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-46741'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024091835-CVE-2024-46741-4ce7@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - score-dispute
epss: 0.00244
epssPercentile: 0.15883
ingestedAt: '2026-08-27T14:02:52.623Z'
scores:
  nvd: 7.8
  vendor: 5.5
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix double free of 'buf' in error path

smatch warning:
drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf'

In fastrpc_req_mmap() error path, the fastrpc buffer is freed in
fastrpc_req_munmap_impl() if unmap is successful.

But in the end, there is an unconditional call to fastrpc_buf_free().
So the above case triggers the double free of fastrpc buf.

## Affected

- `linux_kernel >= 6.2, < 6.6.51`
- `linux_kernel >= 6.7, < 6.10.10`
- `linux_kernel = 6.11`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.10.10`

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-13 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46741.json)