CVE-2026-46100 Details
Description
In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially reverts commit 9d5403b1036c ("fs: convert most other generic_file_*mmap() users to .mmap_prepare()"). This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment. Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.
A vulnerability in the Linux kernel's AFS file system handling has been addressed. The issue arose from a change that converted most generic file memory mapping users to use the .mmap_prepare() function. This change inadvertently created a reference count leak, as .mmap_prepare() was called at a point where a merge or allocation failure could occur, potentially leading to an unintentional reference count increment. The vulnerability has been resolved by reverting to the .mmap function, which properly manages the reference count without the risk of leakage. This change is part of a larger effort to enhance memory mapping functionality, but the immediate reversion was necessary to address the reference count issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/48c7a0eaeea41da17d1d84d2d7a4c40be122b246 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f51f85c044809fbd39ac8ae07ac99bc43ce32bd5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fbfc6578eaca12daa0c09df1e9ba7f2c657b49da | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.17, < 6.18.27 >= 6.19, < 7.0.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 30, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |