CVE-2026-80621
- Source
- https://cve.org/CVERecord?id=CVE-2026-80621
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80621.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80621
- Downstream
- Published
- 2026-08-28T06:48:41.081Z
- Modified
- 2026-08-30T03:48:22.990163909Z
- Summary
- PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit() NULL dereference when no RAS DES capability
dwcpcierasdesdebugfsinit() returns success when the controller has no RAS DES capability, leaving pci->debugfs->rasdesinfo unset. The common debugfs teardown path still calls dwcpcierasdesdebugfsdeinit(), which dereferences rasdesinfo unconditionally.
Return early when no RAS DES state was allocated. In that case no RAS DES mutex was initialized, so there is nothing to destroy.
[mani: reworded subject]
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80621.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/26b67fa10ef84ea667942491b50e6261a45f098d
- https://git.kernel.org/stable/c/514b84b1bf30f75f32c2fa66734dc1a177abb73e
- https://git.kernel.org/stable/c/855870e8c59b97fd424e8fa3543c9e289bb48fac
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80621.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80621
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git