CyberICT

CVE-2026-43248

Microsoft · Published May 7, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

vhost: move vdpa group bound check to vhost_vdpa. vhost: move vdpa group bound check to vhost_vdpa

Affected Products

  • azl3 kernel 6.6.138.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.141.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.143.1-1 on Azure Linux 3.0
  • azl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U