CVE-2026-72067

Summary

In the Linux kernel, the following vulnerability has been resolved:

cpu: hotplug: Preserve per instance callback errors

cpuhp_invoke_callback() unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the original error and make the failed transition look successful.

Keep the rollback result separate from the original error.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < fe9c8d641f6991614d1229a3ffd3e33b879bba9caffected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < ef39758637cc5b603fb05b625c45a98aa306e338affected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < 95232281512b15338549171ed9a2acf21f946ffbaffected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < 7a68257b90d8a9b6d605abc99469ded45ecba63baffected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < 77d4fa8a3ea1c3e8b996ac35e59aee9e77389905affected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < f77117530fc3f5932ffb107182a6dd34006be9b6affected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < 9f7dc355f62c011e4afe8286cf71130d4bfb9d80affected
LinuxLinux724a86881d03ee5794148e65142e24ed3621be66 < 673db10729fb121ea1b16fe57791a0cb9eac1eb5affected
LinuxLinux4.14affected
LinuxLinux0 < 4.14unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References