PT-2026-37518 · Linux+3 · Linux+92

Published 2026-05-06 · Updated 2026-05-12 · CVE-2026-43178

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the procfs component within the do procmap query() function. When a user provides an incorrectly sized buffer for the build ID during a PROCMAP QUERY, the system returns an -ENAMETOOLONG error. Due to recent changes, this error can occur after the mmap lock or per-VMA lock has been unlocked and mmput() has been executed. Consequently, the original error handling path triggers a second mmput() on the mm struct, leading to a double-mmput condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-43178

Affected Products

Linux

Linux-Allwinner-5.19

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.14

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.14

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.14

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Lts

Linux-Nvidia

Linux-Nvidia-6.11

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.14

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.14

Linux-Oracle-6.5

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Realtime-6.14

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux Kernel

References · 14

• https://git.kernel.org/stable/c/8adaff87db143583e08eec4f4e7788f1ef8af94d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43178 · Security Note
• https://ubuntu.com/security/CVE-2026-43178 · Vendor Advisory
• https://git.kernel.org/stable/c/90f5e87c9b75833b9ef3a4415b92c0247f28ab2f · Patch
• https://cve.org/CVERecord?id=CVE-2026-43178 · Security Note
• https://git.kernel.org/stable/c/61dc9f776705d6db6847c101b98fa4f0e9eb6fa3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43178 · Vendor Advisory
• https://git.kernel.org/stable/c/f9fe092084cd04deea18747f58a2304026e76aaa · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43178 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43178 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43178 · Vendor Advisory
• https://t.me/cveNotify/163281 · Telegram Post
• https://docs.bell-sw.com/security/cves/CVE-2026-43178 · Note
• https://git.kernel.org/linus/61dc9f776705d6db6847c101b98fa4f0e9eb6fa3 · Note