PT-2026-43892 · Linux · Linux Kernel

Sashiko · CVE-2026-46025 · Published 2026-05-27 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between the damon call() and damos walk() functions and the kdamond fn() termination process. Because the registration of requests in damon call() and the unsetting of damon ctx->kdamond are protected by different mutexes, a caller may register a new request and begin waiting for it just as the kdamond thread is terminating. Since the terminating thread no longer handles new requests, this leads to infinite waiting and deadlocks. Additionally, if a request in repeat mode includes dealloc on cancel, memory leaks may occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-46025

OPENSUSE-SU-2026:10954-1

USN-8488-1

USN-8488-2

USN-8489-1

USN-8507-1

USN-8569-1

Affected Products

Linux Kernel

References · 999

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46025.json · Exploit
• https://ubuntu.com/security/CVE-2026-45842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31583 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52944 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31577 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46131 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8489-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46178 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53033 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53041 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-47326 · Vendor Advisory