Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46093

mm/vmalloc: take vmap_purge_lock in shrinker

Description

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan(). However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks. Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7679ba6b36dbb300b757b672d6a32a606499e14b to < c15ff206ba78820bf2873d0c668a882e99f4b631affected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to < 687ccdf582169cd680aeaf24cc953807c4cd4345affected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to < 12f2341b4c235d5593a433abac201c1c6725787faffected
  • 7679ba6b36dbb300b757b672d6a32a606499e14b to < ec05f51f1e65bce95528543eb73fda56fd201d94affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.27 to ≤ 6.18.*unaffected
  • 7.0.4 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References