--- cve: "CVE-2026-80718" severity: "LOW" cvss: 3.1 epss: "3.5%" vendor: "Linux" kev: false exploited: false published: "2026-08-28 08:16:57" tags: [cve, security, low] source: tsecurity.de CVE-Dossier exported: "2026-09-02T21:11:19+02:00" --- # CVE-2026-80718 > 3.1 LOW ## Beschreibung In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_pages is the total contiguous backing allocation, i.e., nr_units * pcpu_unit_pages, but pcpu_chunk_populated() uses it to set chunk->populated, whose size is pcpu_unit_pages, bitmap. Since bit N in chunk->populated means page offset N inside every unit is backed. When nr_units > 1, the function writes beyond chunk->populated. Fix it by using chunk->nr_pages. It also fixes the global pcpu_nr_empty_pop_pages accounting, since pcpu_balance_free() only iterates up to chunk->nr_pages. Commit a63d4ac4ab609 ("percpu: make percpu-km set chunk->populated bitmap properly") introduced the bitmap overflow issue. Later, commit b539b87fed37f ("percpu: implmeent pcpu_nr_empty_pop_pages and chunk->nr_populated") added pcpu_nr_empty_pop_pages and caused the accounting issue. ## Patch verfügbar (OSV) - Kernel ≥ 5.10.265 - Kernel ≥ 5.15.216 - Kernel ≥ 6.1.183 - Kernel ≥ 6.6.151 - Kernel ≥ 6.12.103 - Kernel ≥ 6.18.44 - Kernel ≥ 7.1.8 ## Referenzen - - - - - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-80718) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_