PT-2026-37407 · Linux · Linux Kernel

CVE-2026-43097

·

Published

2026-04-03

·

Updated

2026-05-14

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the PCI Hyper-V driver where a double free of a domain number occurs during the error path of the hv pci probe() function. If the function fails after storing the domain number in hbus->bridge->domain nr, the domain number is freed via pci bus release emul domain nr(). Subsequently, the bridge release callback pci release host bridge dev() attempts to free the same domain number again, leading to a double call of the ida free() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Multiple Releases of Same Resource or Handle

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13709
CVE-2026-43097

Affected Products

Linux Kernel