CVE-2026-46100
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/05/2026
Last modified:
30/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fs: afs: revert mmap_prepare() change<br />
<br />
Partially reverts commit 9d5403b1036c ("fs: convert most other<br />
generic_file_*mmap() users to .mmap_prepare()").<br />
<br />
This is because the .mmap invocation establishes a refcount, but<br />
.mmap_prepare is called at a point where a merge or an allocation failure<br />
might happen after the call, which would leak the refcount increment.<br />
<br />
Functionality is being added to permit the use of .mmap_prepare in this<br />
case, but in the interim, we need to fix this.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH