diff --git a/meta/recipes-extended/cpio/files/CVE-2026-66484.patch b/meta/recipes-extended/cpio/files/CVE-2026-66484.patch
index 97ce9a785cf..538f80daf9b 100644
--- a/meta/recipes-extended/cpio/files/CVE-2026-66484.patch
+++ b/meta/recipes-extended/cpio/files/CVE-2026-66484.patch
@@ -6,7 +6,7 @@ Subject: [PATCH] The --no-absolute-filenames option affects hard link targets
 
 * src/tar.c (stash_tar_linkname): Apply cpio_safer_name_suffix.
 
-CVE: CVE-2026-66485
+CVE: CVE-2026-66484
 Upstream-Status: Backport [https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=e2b9cbdd3354d2b1569b7390d1bc15c1930559ad]
 Signed-off-by: Peter Marko <peter.marko@siemens.com>
 ---
