CVE-2026-46106

🗓️ 28 May 2026 09:35:11Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 28 Views🌐 WEB

Fixed race in eventfs remount walk by holding eventfs_mutex and SRCU during traversal of events.

Reporter	Title	Published	Views	Family All 91
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1753)	27 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1754)	27 May 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-46106	29 May 202600:00	–	nessus
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	19 Jun 202611:10	–	astralinux
CBLMariner	CVE-2026-46106 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
Cvelist	CVE-2026-46106 eventfs: Hold eventfs_mutex and SRCU when remount walks events	28 May 202609:35	–	cvelist
Debian CVE	CVE-2026-46106	28 May 202609:35	–	debiancve
EUVD	EUVD-2026-32865	28 May 202612:30	–	euvd
Microsoft CVE	eventfs: Hold eventfs_mutex and SRCU when remount walks events	29 May 202608:09	–	mscve

NVD

Vulners

CNA

Node

linux linux_kernelRange6.6.35–6.6.140

linux linux_kernelRange6.9.6–6.12.88

linux linux_kernelRange6.13–6.18.30

linux linux_kernelRange6.19–7.0.7

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/tracefs/event_inode.c",
      "fs/tracefs/inode.c",
      "fs/tracefs/internal.h"
    ],
    "versions": [
      {
        "version": "7ec535ed8724d18ae4e714d2277a5b89450659d2",
        "lessThan": "ae9cd0b46b1890040006a2fc5e905c5d6053fd02",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "340f0c7067a95281ad13734f8225f49c6cf52067",
        "lessThan": "44e64d8a432837308f4dda3ffe819f1ec092a0ba",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "340f0c7067a95281ad13734f8225f49c6cf52067",
        "lessThan": "52b109f1b875b912d4ab2c5fdd8c322d47119d9b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "340f0c7067a95281ad13734f8225f49c6cf52067",
        "lessThan": "ed2ad73bcb0a7a6cc934097d4853b6d5124c317e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "340f0c7067a95281ad13734f8225f49c6cf52067",
        "lessThan": "07004a8c4b572171934390148ee48c4175c77eed",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "99b86d85f7c73d676c50e8c35748f94dd41389da",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "6.6.35",
        "lessThan": "6.6.140",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.9.6",
        "lessThan": "6.10",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/tracefs/event_inode.c",
      "fs/tracefs/inode.c",
      "fs/tracefs/internal.h"
    ],
    "versions": [
      {
        "version": "6.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.88",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.30",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.7",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/07004a8c4b572171934390148ee48c4175c77eed
git	www.git.kernel.org/stable/c/52b109f1b875b912d4ab2c5fdd8c322d47119d9b
git	www.git.kernel.org/stable/c/44e64d8a432837308f4dda3ffe819f1ec092a0ba
git	www.git.kernel.org/stable/c/ae9cd0b46b1890040006a2fc5e905c5d6053fd02
git	www.git.kernel.org/stable/c/ed2ad73bcb0a7a6cc934097d4853b6d5124c317e

Parameter	Position	Path	Description
remount	path	/sys/kernel/tracing	Remount operation can race with eventfs attributes, enabling vulnerability during remount.
uid	path	/sys/kernel/tracing	Remount operation can race with eventfs attributes, enabling vulnerability during remount.
p:kp submit_bio	path	/sys/kernel/tracing/kprobe_events	Write to kprobe_events as part of attack sequence to trigger race condition in eventfs.

25 Jun 2026 21:18Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.5

EPSS0.00122