CVE-2026-80963

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-stats: fix a crash if allocation of per-cpu data fails

If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))" fails, the code jumps to the "out" label and calls dm_stat_free. dm_stat_free does "for_each_possible_cpu(cpu) { dm_kvfree(s->stat_percpu[cpu][0].histogram, s->histogram_alloc_size);", which crashes with NULL pointer dereference if s->stat_percpu[cpu] is NULL.

This commit fixes the bug by testing s->stat_percpu[cpu] for NULL before using it.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < e45f0b0c41139810ff395ba2f3cfca1460a5b8a6; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < 9805d87d0e26c68ee69da3928e665214d2e2851a; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < 564d17573ef643c13cf6e9015124a205fa65e704; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < 389a50d094e13724f5f45e6d9d6ef734c98ba291; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < c3f211b7a277dd404b4e7d23095be964b5b46a27; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < 74210fa072960a18bb0eead487585452af722e4f; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < 0c8f7870ed3ebd512f090d7714cc2c556b9e5c75; >= fd2ed4d252701d3bbed4cd3e3d267ad469bb832a, < cc87e26d9cce22061dc21e51e11afef29dbbc36a
LinuxLinux3.12

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80964In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindCVE-2026-80965In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 CVE-2026-80966In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2CVE-2026-809678.4In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ pcxhr_pCVE-2026-80968In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver CVE-2026-80969In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindlyCVE-2026-80976.3A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. ThCVE-2026-80970In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcp_ioctl_inCVE-2026-809717.8In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000_free_usb_rCVE-2026-80972In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe aloop driver blindly tCVE-2026-80973In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6fire_commCVE-2026-80974In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory alloca
CVE-2026-80963: Unscored | Vulnix