Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.
References
- https://git.kernel.org/stable/c/135ac58097fa5fc707bf392c5cececf59e4080c0
- https://git.kernel.org/stable/c/48a4ee65e677559776349128e6a81a6041986c99
FAQ
What is CVE-2026-97983?
CVE-2026-97983 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls th...
How severe is CVE-2026-97983?
CVSS scoring is not yet available for CVE-2026-97983. Check NVD for updates.
Is there a patch for CVE-2026-97983?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.