Security readout for executives and security teams
Plain-English summary
A Linux kernel FastRPC error-handling flaw can free the same memory buffer twice. A local, low-privileged user may be able to trigger memory corruption without user interaction, potentially compromising confidentiality, integrity, or availability. The supplied CVSS 3.1 score is 7.8.
Executive priority
Treat as a high-priority kernel maintenance issue on systems exposing the affected FastRPC code to untrusted local users. Expedite vendor-backed updates, but do not characterize it as an internet-wide emergency because the supplied evidence indicates local access and does not document active exploitation.
Technical view
In fastrpc_req_mmap(), a successful error-path unmap can free buf through fastrpc_req_munmap_impl(). The function subsequently calls fastrpc_buf_free() unconditionally, producing a double free. The supplied vector is local, low complexity, low privileges, no user interaction, unchanged scope, with high confidentiality, integrity, and availability impact.
Likely exposure
Exposure is limited to Linux systems using an affected kernel and the relevant FastRPC code. The bundle lists 6.2, 6.6.51, 6.10.10, and 6.11 as affected, but also contains an unexplained version “0”; validate exact vendor backport status rather than relying solely on version numbers.
Exploitation context
The supplied record does not establish active exploitation, and its KEV flag is false. The CVSS vector describes local access with low privileges, so this is not presented as a directly remote vulnerability. Public exploit availability and real-world exploitation status are not evidenced by the bundle.
Researcher notes
The defect is specifically an error-path lifetime-management failure: successful cleanup is followed by unconditional cleanup of the same buffer. The bundle provides three stable-kernel fix commits but no exploit analysis. Its affected-version data is partially ambiguous and includes repeated commit identifiers, so downstream vendor advisories should determine product-specific exposure.
Mitigation direction
- Install a vendor-supported kernel containing the referenced FastRPC fix.
- Check distribution or device-vendor guidance for applicable backports and fixed releases.
- Prioritize multi-user or otherwise untrusted systems where local low-privileged access is available.
- Use vendor-recommended compensating controls if immediate kernel replacement is unavailable.
Validation and detection
- Record each system’s running kernel version and vendor build identifier.
- Confirm whether the running kernel includes one of the referenced stable fixes or an equivalent backport.
- Determine whether the affected FastRPC code is present in each deployed kernel.
- Recheck patched systems after reboot to confirm the remediated kernel is running.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-46741 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/f77dc8a75859e559f3238a6d906206259227985eCVE reference, Linux
- https://git.kernel.org/stable/c/bfc1704d909dc9911a558b1a5833d3d61a43a1f2CVE reference, Linux
- https://git.kernel.org/stable/c/e8c276d4dc0e19ee48385f74426aebc855b49aafCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.