Linux Kernel PCI Hyper-V Driver Vulnerability in Domain Number Handling

CVE-2026-43097

What is CVE-2026-43097?

A vulnerability exists in the Linux kernel's PCI Hyper-V driver related to improper handling of the domain number during error cleanup. When the hv_pci_probe() function fails, it results in a situation where the domain number is freed twice. This dual free can trigger warnings in the system log, indicating the attempt to release an unallocated ID. To mitigate this issue, the kernel has been updated to allow the PCI core to manage the domain number's memory release appropriately, preventing potential system instability.

References