CVE-2026-97983: vduse: return compat ioctl results directly

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Affected products

Linux kernel: from 7.1.5 before 7.2; 7.2 — fixed in 7.2, 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.2, 7.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-97983 or the next vulnerability affects your stack