https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:58:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46093 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm/vmalloc: take vmap_purge_lock in shrinker</p> <p>decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan().</p> <p>However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks.</p> <p>Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm/vmalloc: take vmap_purge_lock in shrinker</p> <p>decay_va_pool_node() can be invoked concurrently from two paths: __purge_vmap_area_lazy() when pools are being purged, and the shrinker via vmap_node_shrink_scan().</p> <p>However, decay_va_pool_node() is not safe to run concurrently, and the shrinker path currently lacks serialization, leading to races and possible leaks.</p> <p>Protect decay_va_pool_node() by taking vmap_purge_lock in the shrinker path to ensure serialization with purge users.</p> https://vulnerability.circl.lu/vuln/cve-2026-46093