CVE-2026-97983: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Засегнати продукти

• Linux Linux: 455a2a1af92651764e9eb42cec0d95ac142afc28 преди 135ac58097fa5fc707bf392c5cececf59e4080c0; 455a2a1af92651764e9eb42cec0d95ac142afc28 преди 48a4ee65e677559776349128e6a81a6041986c99; 7dd28904c42ee3b0728c0692dd3332c2c83e8f33; 7.1.5 преди 7.2
• Linux Linux: 7.2; преди 7.2; 7.2.7 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-97983
• https://nvd.nist.gov/vuln/detail/CVE-2026-97983
• https://git.kernel.org/stable/c/135ac58097fa5fc707bf392c5cececf59e4080c0
• https://git.kernel.org/stable/c/48a4ee65e677559776349128e6a81a6041986c99