{"id":"CVE-2026-72067","revision":"46b4ca97bb634610ab6dace9cbea1512","records":[{"revision":"46b4ca97bb634610ab6dace9cbea1512","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-72067","aliases":[],"title":"cpu: hotplug: Preserve per instance callback errors","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpu: hotplug: Preserve per instance callback errors\n\ncpuhp_invoke_callback() unwinds earlier callbacks for the same\nhotplug state when one instance fails. The rollback path currently\nreuses ret, so a successful rollback can hide the original error and\nmake the failed transition look successful.\n\nKeep the rollback result separate from the original error.","state":0,"publishedAt":"2026-08-15T05:52:20.268+00:00","modifiedAt":"2026-10-19T21:19:26.303+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/cpu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"fe9c8d641f6991614d1229a3ffd3e33b879bba9c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"ef39758637cc5b603fb05b625c45a98aa306e338\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"95232281512b15338549171ed9a2acf21f946ffb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"7a68257b90d8a9b6d605abc99469ded45ecba63b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"77d4fa8a3ea1c3e8b996ac35e59aee9e77389905\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"f77117530fc3f5932ffb107182a6dd34006be9b6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"9f7dc355f62c011e4afe8286cf71130d4bfb9d80\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"724a86881d03ee5794148e65142e24ed3621be66\",\n                            \"lessThan\": \"673db10729fb121ea1b16fe57791a0cb9eac1eb5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/cpu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/fe9c8d641f6991614d1229a3ffd3e33b879bba9c","https://git.kernel.org/stable/c/ef39758637cc5b603fb05b625c45a98aa306e338","https://git.kernel.org/stable/c/95232281512b15338549171ed9a2acf21f946ffb","https://git.kernel.org/stable/c/7a68257b90d8a9b6d605abc99469ded45ecba63b","https://git.kernel.org/stable/c/77d4fa8a3ea1c3e8b996ac35e59aee9e77389905","https://git.kernel.org/stable/c/f77117530fc3f5932ffb107182a6dd34006be9b6","https://git.kernel.org/stable/c/9f7dc355f62c011e4afe8286cf71130d4bfb9d80","https://git.kernel.org/stable/c/673db10729fb121ea1b16fe57791a0cb9eac1eb5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72067","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-72067","identifiers":["CVE-2026-72067"]},"retained":false,"historicalAffected":[]}],"coverage":[]}