Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-46093

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
27/05/2026
Última modificación:
27/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/vmalloc: take vmap_purge_lock in shrinker<br /> <br /> decay_va_pool_node() can be invoked concurrently from two paths:<br /> __purge_vmap_area_lazy() when pools are being purged, and the shrinker via<br /> vmap_node_shrink_scan().<br /> <br /> However, decay_va_pool_node() is not safe to run concurrently, and the<br /> shrinker path currently lacks serialization, leading to races and possible<br /> leaks.<br /> <br /> Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker<br /> path to ensure serialization with purge users.

Impacto