Riskcovery

CVE-2026-97983

vduse: return compat ioctl results directly

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vduse: return compat ioctl results directly

The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD.

For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 455a2a1af92651764e9eb42cec0d95ac142afc28 to before 135ac58097fa5fc707bf392c5cececf59e4080c0Affected
  • 455a2a1af92651764e9eb42cec0d95ac142afc28 to before 48a4ee65e677559776349128e6a81a6041986c99Affected
  • 7dd28904c42ee3b0728c0692dd3332c2c83e8f33Affected
  • 7.1.5 to before 7.2Affected
LinuxLinux
  • 7.2Affected
  • before 7.2Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.