CVE-2026-46093: mm/vmalloc: take vmap_purge_lock in shrinker
In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc: take vmappurgelock in shrinker
decayvapoolnode() can be invoked concurrently from two paths: purgevmaparealazy() when pools are being purged, and the shrinker via vmapnodeshrinkscan().
However, decayvapoolnode() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks.
Protect decayvapoolnode() by taking vmappurgelock in the shrinker path to ensure serialization with purge users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46093?
CVE-2026-46093 has a risk rating of 23.
How do I fix CVE-2026-46093?
To fix CVE-2026-46093, ensure you update your Linux kernel to the latest stable version that includes the patch.
What is the impact of CVE-2026-46093?
The impact of CVE-2026-46093 relates to potential concurrency issues in memory management functions of the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2026-46093?
CVE-2026-46093 affects specific versions of the Linux kernel prior to the applied patches.
Is CVE-2026-46093 exploitable?
CVE-2026-46093 presents a risk of exploitation due to concurrency vulnerabilities in memory handling.