PT-2026-37518 · Linux · Linux Kernel

·

CVE-2026-43178

·

Published

2026-02-10

·

Updated

2026-05-12

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the procfs component within the do procmap query() function. When a user provides an incorrectly sized buffer for the build ID during a PROCMAP QUERY, the system returns an -ENAMETOOLONG error. Due to recent changes, this error can occur after the mmap lock or per-VMA lock has been unlocked and mmput() has been executed. Consequently, the original error handling path triggers a second mmput() on the mm struct, leading to a double-mmput condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Multiple Releases of Same Resource or Handle

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12175
CVE-2026-43178

Affected Products

Linux Kernel