Skip to main content
← All vulnerabilities
CVE-2026-72067

cpu: hotplug: Preserve per instance callback errors

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhp_invoke_callback() unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the original error and make the failed transition look successful. Keep the rollback result separate from the original error.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in fe9c8d641f6991614d1229a3ffd3e33b879bba9c; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in ef39758637cc5b603fb05b625c45a98aa306e338; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in 95232281512b15338549171ed9a2acf21f946ffb; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in 7a68257b90d8a9b6d605abc99469ded45ecba63b; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in 77d4fa8a3ea1c3e8b996ac35e59aee9e77389905; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in f77117530fc3f5932ffb107182a6dd34006be9b6; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in 9f7dc355f62c011e4afe8286cf71130d4bfb9d80; From 724a86881d03ee5794148e65142e24ed3621be66 · fixed in 673db10729fb121ea1b16fe57791a0cb9eac1eb5

  • Linux Linux

    4.14

  • KernelLinux

    From 4.14.0 · fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5

References 8

git.kernel.org