High severity7.8NVD Advisory· Published May 27, 2026· Updated Jun 25, 2026
CVE-2026-46100
CVE-2026-46100
Description
In the Linux kernel, the following vulnerability has been resolved:
fs: afs: revert mmap_prepare() change
Partially reverts commit 9d5403b1036c ("fs: convert most other generic_file_*mmap() users to .mmap_prepare()").
This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment.
Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.
Affected products
4- osv-coords2 versions
>= 6.17.0, < 6.18.27+ 1 more
- (no CPE)range: >= 6.17.0, < 6.18.27
- (no CPE)range: < 7.0.11-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.