CVE-2026-93261

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> locking/lockdep: Fix NULL pointer dereference in __lock_set_class()<br /> <br /> register_lock_class() can return NULL when the lock class pool is<br /> exhausted, graph_lock() fails, or key validation fails. However,<br /> __lock_set_class() uses the return value directly in pointer arithmetic<br /> without a NULL check:<br /> <br /> class = register_lock_class(lock, subclass, 0);<br /> hlock-&gt;class_idx = class - lock_classes;<br /> <br /> If class is NULL, this computes a wild offset that corrupts<br /> hlock-&gt;class_idx. The subsequent reacquire_held_locks() call will<br /> invoke hlock_class() with this corrupted index, leading to a NULL or<br /> out-of-bounds pointer dereference.<br /> <br /> Add the missing NULL check, consistent with how __lock_acquire() already<br /> handles this case at the same call site.