CVE-2026-43097: PCI: hv: Fix double ida_free in hv_pci_probe error path
In the Linux kernel, the following vulnerability has been resolved:
PCI: hv: Fix double idafree in hvpciprobe error path
If hvpciprobe() fails after storing the domain number in hbus->bridge->domainnr, there is a call to free this domainnr via pcibusreleaseemuldomainnr(), however, during cleanup, the bridge release callback pcireleasehostbridgedev() also frees the domainnr causing idafree to be called on same ID twice and triggering following warning:
idafree called for id=28971 which is not allocated. WARNING: lib/idr.c:594 at idafree+0xdf/0x160, CPU#0: kworker/0:2/198 Call Trace: pcibusreleaseemuldomainnr+0x17/0x20 pcireleasehostbridgedev+0x4b/0x60 devicerelease+0x3b/0xa0 kobjectput+0x8e/0x220 devmpciallochostbridgerelease+0xe/0x20 devresreleaseall+0x9a/0xd0 deviceunbindcleanup+0x12/0xa0 reallyprobe+0x1c5/0x3f0 vmbusaddchannelwork+0x135/0x1a0
Fix this by letting pci core handle the free domainnr and remove the explicit free called in pci-hyperv driver.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43097?
The severity of CVE-2026-43097 is classified as moderate due to the potential for a denial-of-service condition.
How do I fix CVE-2026-43097?
To fix CVE-2026-43097, it is recommended to update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-43097?
CVE-2026-43097 affects the Linux kernel specifically in the context of the PCI Hyper-V implementation.
What does CVE-2026-43097 impact?
CVE-2026-43097 impacts the reliability and stability of the Linux kernel when handling PCI devices, potentially leading to system crashes.
When was CVE-2026-43097 disclosed?
CVE-2026-43097 was disclosed as part of ongoing assessments of the Linux kernel vulnerabilities.