Junglewise Threat Intelligence

CVE-2026-43475: Linux Kernel storvsc denial of service in Hyper-V with PREEMPT_RT

CVE-2026-43475 · Severity: medium · CVSS 5.5 · Published 2026-05-08

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's storage driver for Hyper-V environments can cause system instability or a complete lock-up. This issue occurs specifically when the system is configured with real-time preemption (PREEMPT_RT) enabled. An exploit could lead to a denial-of-service, impacting the availability of virtual machines and the services they host.

Technical details

A vulnerability exists in the 'storvsc' SCSI driver within the Linux kernel when running on Hyper-V with PREEMPT_RT enabled. The root cause is a 'scheduling while atomic' bug where the driver calls 'get_cpu()', which disables preemption, while subsequently attempting to acquire a spinlock ('hv_ringbuffer_write') that is converted to a sleepable rt-mutex under PREEMPT_RT. This violation of atomic context requirements leads to kernel splats and system hangs. The fix replaces 'get_cpu()' and 'put_cpu()' with 'migrate_disable()' and 'migrate_enable()' to ensure the task remains on the same CPU without disabling preemption. Patches have been released across multiple stable kernel branches.

Affected products

  • Linux Linux kernel PREEMPT_RT enabled versions

Timeline

  • 2026-01-29: patched: Initial patch authored by Jan Kiszka
  • 2026-05-08: disclosed: CVE-2026-43475 published

References

Related threats