CVE-2026-43094

A flaw was found in the Linux kernel's ixgbevf driver. When running on Hyper-V virtual machines, a missing operation in the driver's Hyper-V operations table can lead to a null pointer dereference during feature negotiation. This vulnerability allows a local user to trigger a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because it requires specific deployment conditions to trigger a denial of service, namely running as a guest virtual machine on a Hyper-V hypervisor with an Intel virtual function network adapter attached. Under these virtualization environments, probing or initializing the virtual device causes an unhandled null pointer dereference in the kernel. Exploitation is constrained to systems utilizing this specific virtual network interface, limiting the blast radius to local system crashes without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.