CVE-2026-80621

CVE-2026-80621

published August 28, 2026

CVSS
—
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability

dwc_pcie_rasdes_debugfs_init() returns success when the controller has no

RAS DES capability, leaving pci->debugfs->rasdes_info unset. The common

debugfs teardown path still calls dwc_pcie_rasdes_debugfs_deinit(), which

dereferences rasdes_info unconditionally.

Return early when no RAS DES state was allocated. In that case no RAS DES

mutex was initialized, so there is nothing to destroy.

[mani: reworded subject]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2026-08-28T12:16Z
References (3)
EPSS history
Timeline
  • 28 AUG 06:48Z
    PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability
    cvelistv5