CVE-2026-80963
Description
In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))" fails, the code jumps to the "out" label and calls dm_stat_free. dm_stat_free does "for_each_possible_cpu(cpu) { dm_kvfree(s->stat_percpu[cpu][0].histogram, s->histogram_alloc_size);", which crashes with NULL pointer dereference if s->stat_percpu[cpu] is NULL. This commit fixes the bug by testing s->stat_percpu[cpu] for NULL before using it.
How to fix
- Linux Linuxe45f0b0c41139810ff395ba2f3cfca1460a5b8a6, 9805d87d0e26c68ee69da3928e665214d2e2851a, 564d17573ef643c13cf6e9015124a205fa65e704, 389a50d094e13724f5f45e6d9d6ef734c98ba291, c3f211b7a277dd404b4e7d23095be964b5b46a27, 74210fa072960a18bb0eead487585452af722e4f, 0c8f7870ed3ebd512f090d7714cc2c556b9e5c75, cc87e26d9cce22061dc21e51e11afef29dbbc36a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < e45f0b0c41139810ff395ba2f3cfca1460a5b8a6, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < 9805d87d0e26c68ee69da3928e665214d2e2851a, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < 564d17573ef643c13cf6e9015124a205fa65e704, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < 389a50d094e13724f5f45e6d9d6ef734c98ba291, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < c3f211b7a277dd404b4e7d23095be964b5b46a27, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < 74210fa072960a18bb0eead487585452af722e4f, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < 0c8f7870ed3ebd512f090d7714cc2c556b9e5c75, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a ≤ v < cc87e26d9cce22061dc21e51e11afef29dbbc36a, 3.12 | e45f0b0c41139810ff395ba2f3cfca1460a5b8a6, 9805d87d0e26c68ee69da3928e665214d2e2851a, 564d17573ef643c13cf6e9015124a205fa65e704, 389a50d094e13724f5f45e6d9d6ef734c98ba291, c3f211b7a277dd404b4e7d23095be964b5b46a27, 74210fa072960a18bb0eead487585452af722e4f, 0c8f7870ed3ebd512f090d7714cc2c556b9e5c75, cc87e26d9cce22061dc21e51e11afef29dbbc36a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.