Unrated severityNVD Advisory· Published Sep 25, 2026· Updated Oct 19, 2026
CVE-2026-97983
CVE-2026-97983
Description
In the Linux kernel, the following vulnerability has been resolved:
vduse: return compat ioctl results directly
The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD.
For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.
Affected products
3- osv-coords2 versions
>= 7.2.0, < 7.2.7+ 1 more
- (no CPE)range: >= 7.2.0, < 7.2.7
- (no CPE)range: < 7.2.9-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.