VULNERABILITY INTELLIGENCE
CVE-2026-43178
CVSS score7.8 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-05-06
Last modified2026-07-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly sized buffer for build ID for PROCMAP_QUERY we return with -ENAMETOOLONG error. After recent changes this condition happens later, after we unlocked mmap_lock/per-VMA lock and did mmput(), so original goto out is now wrong and will double-mmput() mm_struct. Fix by jumping further to clean up only vm_file and name_buf.
Weakness classification
- nvd@nist.gov: CWE-415
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-1341