CVE-2026-80963

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-80963
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80963.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-80963
Downstream
Related
Published
2026-09-11T19:42:29Z
Modified
2026-09-18T18:26:38Z
Summary
dm-stats: fix a crash if allocation of per-cpu data fails
Details

In the Linux kernel, the following vulnerability has been resolved:

dm-stats: fix a crash if allocation of per-cpu data fails

If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))" fails, the code jumps to the "out" label and calls dm_stat_free. dm_stat_free does "for_each_possible_cpu(cpu) { dm_kvfree(s->stat_percpu[cpu][0].histogram, s->histogram_alloc_size);", which crashes with NULL pointer dereference if s->stat_percpu[cpu] is NULL.

This commit fixes the bug by testing s->stat_percpu[cpu] for NULL before using it.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80963.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fd2ed4d252701d3bbed4cd3e3d267ad469bb832a
Fixed
e45f0b0c41139810ff395ba2f3cfca1460a5b8a6
Fixed
9805d87d0e26c68ee69da3928e665214d2e2851a
Fixed
564d17573ef643c13cf6e9015124a205fa65e704
Fixed
389a50d094e13724f5f45e6d9d6ef734c98ba291
Fixed
c3f211b7a277dd404b4e7d23095be964b5b46a27
Fixed
74210fa072960a18bb0eead487585452af722e4f
Fixed
0c8f7870ed3ebd512f090d7714cc2c556b9e5c75
Fixed
cc87e26d9cce22061dc21e51e11afef29dbbc36a

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80963.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.12.0
Fixed
5.10.270
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.221
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80963.json"