CVE-2026-46093

Katalog CVE

CVSS 7.8 · High EPSS 0,13%

Kerentanan pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan(). However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks. Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.

Rincian

Terbit di NVD

27 Mei 2026

Terakhir diubah

18 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/12f2341b4c235d5593a433abac201c1c6725787f patch
• https://git.kernel.org/stable/c/687ccdf582169cd680aeaf24cc953807c4cd4345 patch
• https://git.kernel.org/stable/c/ec05f51f1e65bce95528543eb73fda56fd201d94 patch
• https://git.kernel.org/stable/c/c15ff206ba78820bf2873d0c668a882e99f4b631