CVE-2026-46268— PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | b7e2823787735ca009e63f35f164b46df0ef096c< eb9aa9f8010465d927864f5a35bdc5604b0ff51a | affected |
b7e2823787735ca009e63f35f164b46df0ef096c< 9b69243983fb2f4d4d1f4ef0989bc1296547dc2c | affected | ||
b7e2823787735ca009e63f35f164b46df0ef096c< cb500023a75246f60b79af9f7321d6e75330c5b5 | affected | ||
6.15 | affected | ||
< 6.15 | unaffected | ||
6.18.14≤ 6.18.* | unaffected | ||
6.19.4≤ 6.19.* | unaffected | ||
7.0≤ * | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-46268
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the initial page refcount of p2pdma page from one to zero, however, in p2pmem_alloc_mmap() it uses "VM_WARN_ON_ONCE_PAGE(!page_ref_count(page))" to assert the initial page refcount should not be zero and the following will be reported when CONFIG_DEBUG_VM is enabled: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x380400000 flags: 0x20000000002000(reserved|node=0|zone=4) raw: 0020000000002000 ff1100015e3ab440 0000000000000000 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: VM_WARN_ON_ONCE_PAGE(!page_ref_count(page)) ------------[ cut here ]------------ WARNING: CPU: 5 PID: 449 at drivers/pci/p2pdma.c:240 p2pmem_alloc_mmap+0x83a/0xa60 Fix by using "page_ref_count(page)" as the assertion condition.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于p2pmem_alloc_mmap中页面引用计数断言条件错误，可能导致警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-46268
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46268
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-46268 (3)
Same Patch Batch · Linux · 2026-06-03 · 32 CVEs total
| CVE-2026-46244 | 9.1 CRITICAL | netfilter: nft_inner: Fix IPv6 inner_thoff desync |
| CVE-2026-46266 | 9.1 CRITICAL | inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP |
| CVE-2026-46264 | 8.8 HIGH | drm/xe/pf: Fix sysfs initialization |
| CVE-2026-46273 | 8.6 HIGH | ibmveth: Disable GSO for packets with small MSS |
| CVE-2026-46251 | 8.4 HIGH | btrfs: fix block_group_tree dirty_list corruption |
| CVE-2026-46270 | 8.4 HIGH | power: supply: rt9455: Fix use-after-free in power_supply_changed() |
| CVE-2026-46263 | 7.8 HIGH | drm/amd/display: Fix out-of-bounds stream encoder index v3 |
| CVE-2026-46260 | 7.8 HIGH | ipv6: Fix out-of-bound access in fib6_add_rt2node(). |
| CVE-2026-46259 | 7.8 HIGH | procfs: fix missing RCU protection when reading real_parent in do_task_stat() |
| CVE-2026-46271 | 7.8 HIGH | wifi: ath12k: do WoW offloads only on primary link |
| CVE-2026-46253 | 7.8 HIGH | pstore/ram: fix buffer overflow in persistent_ram_save_old() |
| CVE-2026-46265 | 7.5 HIGH | RDMA/hns: Fix WQ_MEM_RECLAIM warning |
| CVE-2026-46250 | 7.3 HIGH | MIPS: Work around LLVM bug when gp is used as global register variable |
| CVE-2025-71314 | drm/panthor: Recover from panthor_gpu_flush_caches() failures | |
| CVE-2025-71313 | PCI: endpoint: Add missing NULL check for alloc_workqueue() | |
| CVE-2026-46245 | drm/amd/display: Fix dc_link NULL handling in HPD init | |
| CVE-2026-46246 | power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler | |
| CVE-2026-46247 | clk: qcom: gfx3d: add parent to parent request map | |
| CVE-2026-46248 | wifi: ath12k: clear stale link mapping of ahvif->links_map | |
| CVE-2026-46249 | octeontx2-af: Fix PF driver crash with kexec kernel booting |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
Same vendor: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. Comments for CVE-2026-46268
No comments yet