CVE-2026-72067CWE-754

CVE-2026-72067

High · published August 15, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cpu: hotplug: Preserve per instance callback errors

cpuhp_invoke_callback() unwinds earlier callbacks for the same

hotplug state when one instance fails. The rollback path currently

reuses ret, so a successful rollback can hide the original error and

make the failed transition look successful.

Keep the rollback result separate from the original error.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-08-15T10:21Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:52Z
    cpu: hotplug: Preserve per instance callback errors
    cvelistv5