PT-2026-37407 · Linux · Linux Kernel
CVE-2026-43097
·
Published
2026-04-03
·
Updated
2026-05-14
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the PCI Hyper-V driver where a double free of a domain number occurs during the error path of the
hv pci probe() function. If the function fails after storing the domain number in hbus->bridge->domain nr, the domain number is freed via pci bus release emul domain nr(). Subsequently, the bridge release callback pci release host bridge dev() attempts to free the same domain number again, leading to a double call of the ida free() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Multiple Releases of Same Resource or Handle
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel