CVE-2026-43178

A flaw was found in the Linux kernel's procfs component. A local user, by providing a malformed input buffer during a specific memory mapping query (PROCMAP_QUERY), can trigger an error in how the kernel manages process memory. This can lead to a double release of memory resources, potentially causing the system to crash and resulting in a denial of service (DoS).

This vulnerability is rated as Important due to the potential for a local attacker to cause kernel memory corruption or trigger a kernel panic and denial of service. The flaw stems from improper reference count handling during procfs memory mapping queries with invalid buffer sizes. However, supported Red Hat Enterprise Linux releases do not include the vulnerable code path introduced in newer upstream kernels, leaving default enterprise installations unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.