CVE-2026-46093

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/05/2026
Last modified:
27/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/vmalloc: take vmap_purge_lock in shrinker<br /> <br /> decay_va_pool_node() can be invoked concurrently from two paths:<br /> __purge_vmap_area_lazy() when pools are being purged, and the shrinker via<br /> vmap_node_shrink_scan().<br /> <br /> However, decay_va_pool_node() is not safe to run concurrently, and the<br /> shrinker path currently lacks serialization, leading to races and possible<br /> leaks.<br /> <br /> Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker<br /> path to ensure serialization with purge users.

Impact