Linux Kernel fastrpc List Iterator Vulnerability Leading to Kernel Crash

Vulnerability

A vulnerability in the Linux kernel's fastrpc implementation involves improper handling of list iterators, which can cause a kernel crash. The issue arises because the list iterator 'map' is always set and non-NULL when using 'list_for_each_entry()'. This makes it incorrect to assume that 'map' will be NULL if the list is empty, as the check will never function as intended. The flaw can be exploited, leading to a kernel crash by causing a failure in handling user memory access, which is outside the normal uaccess routines. The crash occurs after a series of function calls related to fastrpc memory mapping and device I/O control.

Impact

Exploitation of this vulnerability causes a kernel crash, disrupting system operations and potentially leading to a denial of service.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.