{"apiVersion":"1.0","identifier":"CVE-2026-80718","description":"In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() In pcpu_create_chunk(), nr_pages is the total contiguous backing allocation, i.e., nr_units * pcpu_unit_pages, but pcpu_chunk_populated() uses it to set chunk->populated, whose size is pcpu_unit_pages, bitmap. Since bit N in chunk->populated means page offset N inside every unit is backed. When nr_units > 1, the function writes beyond chunk->populated. Fix it by using chunk->nr_pages. It also fixes the global pcpu_nr_empty_pop_pages accounting, since pcpu_balance_free() only iterates up to chunk->nr_pages. Commit a63d4ac4ab609 (-percpu: make percpu-km set chunk->populated bitmap properly-) introduced the bitmap overflow issue. Later, commit b539b87fed37f (-percpu: implmeent pcpu_nr_empty_pop_pages and chunk->nr_populated-) added pcpu_nr_empty_pop_pages and caused the accounting issue.","publishedAt":"2026-08-28T08:16:57","lastModifiedAt":"2026-08-28T08:16:57","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80718","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00164,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-80718","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-80718","en":"https://www.redsauce.net/en/cves/CVE-2026-80718","fr":"https://www.redsauce.net/fr/cves/CVE-2026-80718","pt":"https://www.redsauce.net/pt/cves/CVE-2026-80718","de":"https://www.redsauce.net/de/cves/CVE-2026-80718","sk":"https://www.redsauce.net/sk/cves/CVE-2026-80718","el":"https://www.redsauce.net/el/cves/CVE-2026-80718"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-80718"}}