CVE-2026-80963

dm-stats: fix a crash if allocation of per-cpu data fails

N/A
Published: September 11, 2026 at 07:42 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))" fails, the code jumps to the "out" label and calls dm_stat_free. dm_stat_free does "for_each_possible_cpu(cpu) { dm_kvfree(s->stat_percpu[cpu][0].histogram, s->histogram_alloc_size);", which crashes with NULL pointer dereference if s->stat_percpu[cpu] is NULL. This commit fixes the bug by testing s->stat_percpu[cpu] for NULL before using it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

3.12fd2ed4d252701d3bbed4cd3e3d267ad469bb832a
Vendor states this is fixed in 0c8f7870ed3ebd512f090d7714cc2c556b9e5c75 (fixed)
Vendor states this is fixed in 389a50d094e13724f5f45e6d9d6ef734c98ba291 (fixed)
Vendor states this is fixed in 564d17573ef643c13cf6e9015124a205fa65e704 (fixed)
Vendor states this is fixed in 74210fa072960a18bb0eead487585452af722e4f (fixed)
Vendor states this is fixed in 9805d87d0e26c68ee69da3928e665214d2e2851a (fixed)
Vendor states this is fixed in c3f211b7a277dd404b4e7d23095be964b5b46a27 (fixed)
Vendor states this is fixed in cc87e26d9cce22061dc21e51e11afef29dbbc36a (fixed)
Vendor states this is fixed in e45f0b0c41139810ff395ba2f3cfca1460a5b8a6 (fixed)
Vendor states this is fixed in 3.12 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card