CVE-2026-46100
- Source
- https://cve.org/CVERecord?id=CVE-2026-46100
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46100.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-46100
- Downstream
- Related
- Published
- 2026-05-27T12:59:06.853Z
- Modified
- 2026-06-27T11:54:57.552989188Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- fs: afs: revert mmap_prepare() change
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fs: afs: revert mmap_prepare() change
Partially reverts commit 9d5403b1036c ("fs: convert most other genericfile*mmap() users to .mmap_prepare()").
This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment.
Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46100.json" }- References
-
- https://git.kernel.org/stable/c/48c7a0eaeea41da17d1d84d2d7a4c40be122b246
- https://git.kernel.org/stable/c/f51f85c044809fbd39ac8ae07ac99bc43ce32bd5
- https://git.kernel.org/stable/c/fbfc6578eaca12daa0c09df1e9ba7f2c657b49da
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46100.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46100
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git