CVE-2026-46100 PUBLISHED

fs: afs: revert mmap_prepare() change

Assigner: Linux
Reserved: 13.05.2026 Published: 27.05.2026 Updated: 27.05.2026

In the Linux kernel, the following vulnerability has been resolved:

fs: afs: revert mmap_prepare() change

Partially reverts commit 9d5403b1036c ("fs: convert most other generic_file_*mmap() users to .mmap_prepare()").

This is because the .mmap invocation establishes a refcount, but .mmap_prepare is called at a point where a merge or an allocation failure might happen after the call, which would leak the refcount increment.

Functionality is being added to permit the use of .mmap_prepare in this case, but in the interim, we need to fix this.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 9d5403b1036cdcd4be0f9f5568612c0e60e73d79 to f51f85c044809fbd39ac8ae07ac99bc43ce32bd5 (excl.)
  • affected from 9d5403b1036cdcd4be0f9f5568612c0e60e73d79 to 48c7a0eaeea41da17d1d84d2d7a4c40be122b246 (excl.)
  • affected from 9d5403b1036cdcd4be0f9f5568612c0e60e73d79 to fbfc6578eaca12daa0c09df1e9ba7f2c657b49da (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.17 is affected
  • unaffected from 0 to 6.17 (excl.)
  • unaffected from 6.18.27 to 6.18.* (incl.)
  • unaffected from 7.0.4 to 7.0.* (incl.)
  • unaffected from 7.1-rc1 to * (incl.)

References