CVE-2026-46106

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the eventfs component where the system fails to properly hold the eventfs mutex and SRCU (Sleepable Read-Copy Update) during remount operations that walk events. Specifically, the eventfs set attrs() function recurses through ei->children while only holding a rcu read lock(), which is insufficient. This leads to several race conditions: the list traversal races with list del rcu() in the eventfs remove rec() function, and eventfs inodes can be reclaimed because rcu read lock() does not extend an SRCU grace period. Additionally, writes to ei->attr race with eventfs set attr(), which requires the eventfs mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.