CVE-2026-97983
Received Received - Intake

VDUSE ioctl Handling Issue in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET_FD, this overwrites receive_fd()'s return value after the descriptor is installed, leaking one fd per call. Return handled compat results directly and use native dispatch only for other commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97983
EUVD
EUVD-2026-86637

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the vduse compat ioctl handler. The handler processes commands VDUSE_IOTLB_GET_FD and VDUSE_VQ_GET_INFO but incorrectly calls the native handler afterward. Due to differing command sizes, the native handler returns -ENOIOCTLCMD, which overwrites the return value of receive_fd(). This causes file descriptor leaks, with one fd leaked per call.

Detection Guidance

This vulnerability is specific to the Linux kernel's vduse subsystem and may not have direct network detection methods. Check kernel logs for errors related to VDUSE_IOTLB_GET_FD or VDUSE_VQ_GET_INFO ioctl calls. Use commands like dmesg | grep vduse or journalctl -k | grep vduse to inspect kernel messages for unusual activity.

Impact Analysis

The vulnerability can lead to file descriptor leaks, potentially exhausting system resources. Attackers could exploit this to cause denial-of-service conditions by depleting available file descriptors. It may also allow unauthorized access to file descriptors if exploited in certain scenarios.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the vduse module by running modprobe -r vduse if it is not required for your system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97983. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart