CVE-2026-80551
Received Received - Intake

s390/vfio_ccw IDAW Consistency Validation Flaw

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full IDAL. Verify that the address found in the first IDAW is unchanged between reads, to ensure a consistent set of IDAWs being worked with.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80551
EUVD
EUVD-2026-66466

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability affecting the s390/vfio_ccw driver. It involves ensuring the first IDAW (Indirect Data Address Word) in a list remains constant between reads. The first IDAW does not need to align with 2K/4K boundaries like others, so it is read separately to calculate buffer size. The vulnerability requires verifying the address in the first IDAW does not change to maintain consistency in the IDAW set.

Impact Analysis

This vulnerability could allow an attacker to manipulate memory access in the s390/vfio_ccw driver, potentially leading to unauthorized data access, system crashes, or privilege escalation. It primarily affects systems using IBM Z (s390) architecture with virtualization features enabled.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Verify the patch is applied by checking the kernel version and confirming the fix is included in the changelog.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80551. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart