CVE-2026-80621 PUBLISHED

PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability

Assigner: Linux
Reserved: 26.08.2026 Published: 28.08.2026 Updated: 28.08.2026

In the Linux kernel, the following vulnerability has been resolved:

PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability

dwc_pcie_rasdes_debugfs_init() returns success when the controller has no RAS DES capability, leaving pci->debugfs->rasdes_info unset. The common debugfs teardown path still calls dwc_pcie_rasdes_debugfs_deinit(), which dereferences rasdes_info unconditionally.

Return early when no RAS DES state was allocated. In that case no RAS DES mutex was initialized, so there is nothing to destroy.

[mani: reworded subject]

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 4fbfa17f9a075593281034f566ca79cbf4930c82 to 514b84b1bf30f75f32c2fa66734dc1a177abb73e (excl.)
  • affected from 4fbfa17f9a075593281034f566ca79cbf4930c82 to 855870e8c59b97fd424e8fa3543c9e289bb48fac (excl.)
  • affected from 4fbfa17f9a075593281034f566ca79cbf4930c82 to 26b67fa10ef84ea667942491b50e6261a45f098d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.15 is affected
  • unaffected from 0 to 6.15 (excl.)
  • unaffected from 6.18.40 to 6.18.* (incl.)
  • unaffected from 7.1.5 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References