Riskcovery

CVE-2026-46093

mm/vmalloc: take vmap_purge_lock in shrinker

State
Published
Severity
7.8 High
Published
May 27, 2026
Updated
Aug 5, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/vmalloc: take vmap_purge_lock in shrinker

decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan().

However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks.

Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to before c15ff206ba78820bf2873d0c668a882e99f4b631Affected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to before 687ccdf582169cd680aeaf24cc953807c4cd4345Affected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to before 12f2341b4c235d5593a433abac201c1c6725787fAffected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to before ec05f51f1e65bce95528543eb73fda56fd201d94Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.