CVE-2026-46268

MEDIUM EPSS 1.7%
Published Jun 3, 20263w ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 3, 2026 3w ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page refcount of p2pdma page from one to zero, however, in p2pmem_alloc_mmap() it uses "VM_WARN_ON_ONCE_PAGE(!page_ref_count(page))" to assert the initial page refcount should not be zero and the following will be reported when CONFIG_DEBUG_VM is enabled: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x380400000 flags: 0x20000000002000(reserved|node=0|zone=4) raw: 0020000000002000 ff1100015e3ab440 0000000000000000 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: VM_WARN_ON_ONCE_PAGE(!page_ref_count(page)) ------------[ cut here ]------------ WARNING: CPU: 5 PID: 449 at drivers/pci/p2pdma.c:240 p2pmem_alloc_mmap+0x83a/0xa60 Fix by using "page_ref_count(page)" as the assertion condition.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥6.15  –  <6.18.14
linuxlinux_kernel*≥6.19  –  <6.19.4

References 3

  • git.kernel.org https://git.kernel.org/stable/c/9b69243983fb2f4d4d1f4ef0989bc1296547dc2c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cb500023a75246f60b79af9f7321d6e75330c5b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb9aa9f8010465d927864f5a35bdc5604b0ff51a
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/9b69243983fb2f4d4d1f4ef0989bc1296547dc2c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cb500023a75246f60b79af9f7321d6e75330c5b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb9aa9f8010465d927864f5a35bdc5604b0ff51a
    Patch