CVE-2026-43097

A flaw was found in the Linux kernel's PCI Hyper-V driver. During error handling, a specific resource identifier can be inadvertently freed twice. This double free vulnerability can lead to memory corruption, potentially causing system instability and a Denial of Service (DoS).

This vulnerability is rated as Low severity because it requires specific virtualization hardware initialization conditions and only triggers within an uncommon device probe failure pathway. The issue is constrained to guest virtual machines running on Microsoft Hyper-V or Azure platforms configured with pass-through or accelerated PCI devices. Because successful exploitation cannot be initiated remotely and enterprise distributions prior to Red Hat Enterprise Linux 10 do not contain the affected code, the risk to typical enterprise deployments is minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.