CVE-2026-80549
Received Received - Intake

s390/vfio_ccw FSM Cleanup Race Condition Fix

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the device has been lost, and is (by definition) no longer operational. Since this can happen asynchronously from the normal behavior of the driver, the cleanup may happen when holding other locks in the calling sequence (notably, the cio subchannel lock). Push the cleanup of the private->cp resources to a workqueue, where it can be done out from under that lock sequence and a future patch can safely manage the locking requirements.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80549
EUVD
EUVD-2026-66464

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper cleanup of resources in the s390/vfio_ccw driver. When a device becomes non-operational, cleanup tasks are performed while holding locks, which can lead to deadlocks or other issues. The fix moves this cleanup to a workqueue to avoid holding locks during cleanup.

Detection Guidance

This vulnerability is specific to the Linux kernel's s390/vfio_ccw driver and may not have direct network detection methods. Check kernel logs for errors related to vfio_ccw or s390 devices using commands like dmesg | grep vfio_ccw or journalctl -k | grep vfio_ccw.

Impact Analysis

This vulnerability could cause system instability or crashes if the cleanup process deadlocks due to improper lock handling. It may lead to resource leaks or unpredictable behavior in systems using s390/vfio_ccw devices.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel patches and apply them promptly. If using s390/vfio_ccw devices, ensure proper driver configuration and avoid operations that could trigger the race condition described.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80549. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart