CVE-2026-46093
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/05/2026
Last modified:
27/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/vmalloc: take vmap_purge_lock in shrinker<br />
<br />
decay_va_pool_node() can be invoked concurrently from two paths:<br />
__purge_vmap_area_lazy() when pools are being purged, and the shrinker via<br />
vmap_node_shrink_scan().<br />
<br />
However, decay_va_pool_node() is not safe to run concurrently, and the<br />
shrinker path currently lacks serialization, leading to races and possible<br />
leaks.<br />
<br />
Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker<br />
path to ensure serialization with purge users.



