{"id":"AZL-100854","summary":"CVE-2026-80963 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-stats: fix a crash if allocation of per-cpu data fails\n\nIf \"dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))\" fails, the code\njumps to the \"out\" label and calls dm_stat_free. dm_stat_free does\n\"for_each_possible_cpu(cpu) { dm_kvfree(s-\u003estat_percpu[cpu][0].histogram,\ns-\u003ehistogram_alloc_size);\", which crashes with NULL pointer dereference\nif s-\u003estat_percpu[cpu] is NULL.\n\nThis commit fixes the bug by testing s-\u003estat_percpu[cpu] for NULL before\nusing it.","modified":"2026-09-13T06:06:36Z","published":"2026-09-11T20:19:02Z","upstream":["CVE-2026-80963"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80963"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100854.json"}}],"schema_version":"1.9.0"}