CVE-2026-43249: 9p/xen: protect xen_9pfs_front_free against concurrent calls

Overview

Severity
High (CVSS 8.8)
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit Status
Not Exploited
Patch Tuesday
2026-May
Released
2026-05-13
Last Updated
2026-06-17
EPSS Score
0.24% (percentile: 15.2%)

Affected Products (3)

Open Source Software

  • azl3 kernel 6.6.138.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.139.1-1 on Azure Linux 3.0

Other

  • 21443-17084

Revision History

  • 2026-05-13: Information published.
  • 2026-05-17: Information published.
  • 2026-05-22: Information published.
  • 2026-06-17: Information published.