-

CVE-2026-97983

vduse: return compat ioctl results directly

In the Linux kernel, the following vulnerability has been resolved:

vduse: return compat ioctl results directly

The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but
then calls the native handler. Their different command sizes make native
dispatch return -ENOIOCTLCMD.

For GET_FD, this overwrites receive_fd()'s return value after the
descriptor is installed, leaking one fd per call. Return handled compat
results directly and use native dispatch only for other commands.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 455a2a1af92651764e9eb42cec0d95ac142afc28
Version < 135ac58097fa5fc707bf392c5cececf59e4080c0
Status affected
Version 455a2a1af92651764e9eb42cec0d95ac142afc28
Version < 48a4ee65e677559776349128e6a81a6041986c99
Status affected
Version 7dd28904c42ee3b0728c0692dd3332c2c83e8f33
Status affected
Version 7.1.5
Version < 7.2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.2
Status affected
Version 0
Version < 7.2
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/135ac58097fa5fc707bf392c5cececf59e4080c0
https://git.kernel.org/stable/c/48a4ee65e677559776349128e6a81a6041986c99