CVE-2026-97983 PUBLISHED

vduse: return compat ioctl results directly

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

vduse: return compat ioctl results directly

The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD.

For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 455a2a1af92651764e9eb42cec0d95ac142afc28 to 135ac58097fa5fc707bf392c5cececf59e4080c0 (excl.)
  • affected from 455a2a1af92651764e9eb42cec0d95ac142afc28 to 48a4ee65e677559776349128e6a81a6041986c99 (excl.)
  • Version 7dd28904c42ee3b0728c0692dd3332c2c83e8f33 is affected
  • affected from 7.1.5 to 7.2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.2 is affected
  • unaffected from 0 to 7.2 (excl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References