High 7.8Published May 27, 2026

CVE-2026-46093mm/vmalloc: take vmap_purge_lock in shrinker

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan(). However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks. Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7679ba6b36dbb300b757b672d6a32a606499e14b before c15ff206ba78820bf2873d0c668a882e99f4b631; 7679ba6b36dbb300b757b672d6a32a606499e14b builds before 687ccdf582169cd680aeaf24cc953807c4cd4345; 7679ba6b36dbb300b757b672d6a32a606499e14b builds before 12f2341b4c235d5593a433abac201c1c6725787f; from 7679ba6b36dbb300b757b672d6a32a606499e14b before ec05f51f1e65bce95528543eb73fda56fd201d94	CNA record
linux linux_kernel linux:linux_kernel	from 6.9 before 6.18.27; from 6.19 before 7.0.4	NVD

References

References

https://git.kernel.org/stable/c/c15ff206ba78820bf2873d0c668a882e99f4b631
https://git.kernel.org/stable/c/687ccdf582169cd680aeaf24cc953807c4cd4345	patch
https://git.kernel.org/stable/c/12f2341b4c235d5593a433abac201c1c6725787f	patch
https://git.kernel.org/stable/c/ec05f51f1e65bce95528543eb73fda56fd201d94	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.