Strix
64.9K

CVE-2026-97983

Unknown

Last modified

CVE-2026-97983 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call.

Description

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 455a2a1af92651764e9eb42cec0d95ac142afc28, < 135ac58097fa5fc707bf392c5cececf59e4080c0; >= 455a2a1af92651764e9eb42cec0d95ac142afc28, < 48a4ee65e677559776349128e6a81a6041986c99; 7dd28904c42ee3b0728c0692dd3332c2c83e8f33; >= 7.1.5, < 7.2
LinuxLinux7.2

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-97983?
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.
How severe is CVE-2026-97983?
Severity scoring for CVE-2026-97983 is pending analysis.
How do I fix CVE-2026-97983?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-97983?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST