CVE-2026-97983

Source
https://cve.org/CVERecord?id=CVE-2026-97983
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97983.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97983
Downstream
Related
Published
2026-09-25T10:23:18Z
Modified
2026-10-09T17:26:56Z
Summary
vduse: return compat ioctl results directly
Details

In the Linux kernel, the following vulnerability has been resolved:

vduse: return compat ioctl results directly

The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD.

For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97983.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
455a2a1af92651764e9eb42cec0d95ac142afc28
Fixed
135ac58097fa5fc707bf392c5cececf59e4080c0
Fixed
48a4ee65e677559776349128e6a81a6041986c99
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7.1.5
Fixed
7.2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7dd28904c42ee3b0728c0692dd3332c2c83e8f33

Affected versions

v7.*
v7.1.10
v7.1.11
v7.1.12
v7.1.13
v7.1.5
v7.1.6
v7.1.7
v7.1.8
v7.1.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97983.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.2.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97983.json"