CVE-2026-99216
kernel: Drivers: hv: Don't reset VMBus connection state on error/exit paths
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 28, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's Hyper-V Virtual Machine Bus (VMBus) driver. During driver exit or connection failure handling, the connection state is prematurely set to disconnected before the disconnect routine runs, preventing the driver from notifying the host hypervisor to unload the connection. Consequently, the hypervisor host may continue to deliver messages or interrupts to the unready guest system, which can lead to system instability or a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-459 · Incomplete Cleanup