CVE-2026-43278

In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been observed to cause double-initialization of cloned bios in request-based device-mapper targets, leading to use-after-free and...

CVE-2026-43278

The vulnerability CVE-2026-43278 affects the Linux kernel’s device-mapper (dm) component, notably dm-multipath, where stale cloned bio pointers in cloned requests can lead to use-after-free and double-free of bios. The sequence shows cloned bios freed during blk_complete_request() while rq->bi...

CVE-2026-43278 dm: clear cloned request bio pointer when last clone bio completes

In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been observed to cause double-initialization of cloned bios in request-based device-mapper targets, leading to use-after-free and...

PT-2026-37618

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description Stale rq-bio values in request-based device-mapper targets can cause double-initialization of cloned bios. This leads to use-after-free and double-free scenarios. For instance, when usin...