CVE-2026-46100

7.8 Élevée

Publiée le 27/05/2026 à 16:17 · Modifiée le 25/06/2026 à 23:18 · Analysée par le NVD · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially reverts commit 9d5403b1036c ("fs: convert most other generic_file_*mmap() users to .mmap_prepare()"). This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment. Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Références

https://git.kernel.org/stable/c/48c7a0eaeea41da17d1d84d2d7a4c40be122b246 Patch
https://git.kernel.org/stable/c/f51f85c044809fbd39ac8ae07ac99bc43ce32bd5 Patch
https://git.kernel.org/stable/c/fbfc6578eaca12daa0c09df1e9ba7f2c657b49da Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories