PT-2026-37407 · Linux · Linux
Published
2026-05-06
·
Updated
2026-05-06
·
CVE-2026-43097
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
PCI: hv: Fix double ida free in hv pci probe error path
If hv pci probe() fails after storing the domain number in
hbus->bridge->domain nr, there is a call to free this domain nr via
pci bus release emul domain nr(), however, during cleanup, the bridge
release callback pci release host bridge dev() also frees the domain nr
causing ida free to be called on same ID twice and triggering following
warning:
ida free called for id=28971 which is not allocated.
WARNING: lib/idr.c:594 at ida free+0xdf/0x160, CPU#0: kworker/0:2/198
Call Trace:
pci bus release emul domain nr+0x17/0x20
pci release host bridge dev+0x4b/0x60
device release+0x3b/0xa0
kobject put+0x8e/0x220
devm pci alloc host bridge release+0xe/0x20
devres release all+0x9a/0xd0
device unbind cleanup+0x12/0xa0
really probe+0x1c5/0x3f0
vmbus add channel work+0x135/0x1a0
Fix this by letting pci core handle the free domain nr and remove
the explicit free called in pci-hyperv driver.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux