CVE-2026-46317

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_lock, including from the MMU notifier path (kvm_unmap_gfn_range() -> kvm_nested_s2_unmap()), which can run at any time. kvm_vcpu_init_nested() reallocates the array and frees the old buffer while holding only kvm->arch.config_lock, so such a walker can reference the freed array. Allocate the new array outside of mmu_lock, as the allocation can sleep. Under the lock, copy the existing entries, fix up the back pointers and reassign the array. Free the old buffer after dropping the lock, as kvfree() can sleep as well.

• https://git.kernel.org/stable/c/4424dbcb06d68e34e51c019a5781a7dc00731971Patch
• https://git.kernel.org/stable/c/70543358fa08e0f7cebc3447c3b70fe97ad7aaa8Patch
• https://git.kernel.org/stable/c/918450ad6010df6ecd2efde12a1409e011da22d6Patch

Published

Jun 9, 2026

Last Modified

Jul 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46311In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46312In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46313In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46314In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46315In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46316In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-46318In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46319In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-4632A weakness has been identified in itsourcecode Online Enroll…7.3
• CVE-2026-46320In the Linux kernel, the following vulnerability has been re…7.4
• CVE-2026-46321In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46322In the Linux kernel, the following vulnerability has been re…7.1