← Retour à la recherche de CVE

CVE-2026-46093

Linux Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan(). However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks. Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.

CVSS 7.8EPSS 0.129%Risque 0.79
Voir la source
Publication
2026-05-27 14:17:30
Versions concernées
unknown
Type
Core software
Vecteur
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Systèmes d’exploitation
Linux