CVE-2026-72067: cpu: hotplug: Preserve per instance callback errors
In the Linux kernel, the following vulnerability has been resolved:
cpu: hotplug: Preserve per instance callback errors
cpuhpinvokecallback() unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the original error and make the failed transition look successful.
Keep the rollback result separate from the original error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72067?
CVE-2026-72067 has a risk score of 12, indicating it is a high-severity vulnerability.
How do I fix CVE-2026-72067?
To fix CVE-2026-72067, upgrade your Linux kernel to the latest patched version that addresses this vulnerability.
What is the impact of CVE-2026-72067?
CVE-2026-72067 can lead to incorrect handling of callback errors during CPU hotplug operations, potentially affecting system stability.
When was CVE-2026-72067 published?
CVE-2026-72067 was published on August 15, 2026.
What component does CVE-2026-72067 affect?
CVE-2026-72067 affects the Linux kernel's CPU hotplug functionality.