SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72067

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the CPU hotplug functionality, where errors in per-instance callbacks during hotplug operations can be obscured by a successful rollback, potentially misleading system administrators about the state of the CPU transitions. This could lead to undetected failures in CPU management, impacting system stability and performance. Organizations utilizing Linux systems, especially those relying on dynamic CPU management, should prioritize addressing this issue to ensure reliable operation.

CVE
CVE-2026-72067
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhp_invoke_callback() unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the original error and make the failed transition look successful. Keep the rollback result separate from the original error.