CVE-2026-80552
Received Received - Intake

s390/vfio_ccw Region Index Validation Flaw

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80552
EUVD
EUVD-2026-66467

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the s390/vfio_ccw driver. It involves ensuring that indexes for read/write regions are within the valid range. The issue arises because the capability chain clamps region indexes to the range of capabilities but fails to do so for existing read/write regions, which should also be enforced.

Detection Guidance

This vulnerability affects the Linux kernel's s390/vfio_ccw component, specifically related to region index validation. Detection requires checking kernel logs for errors or warnings related to vfio_ccw or s390 devices. Commands like dmesg | grep vfio_ccw or journalctl -k | grep vfio_ccw may help identify issues.

Impact Analysis

This vulnerability could allow an attacker to perform out-of-bounds memory access or cause a denial of service by exploiting improperly validated region indexes in the s390/vfio_ccw driver. This may lead to system crashes or potential privilege escalation if exploited.

Mitigation Strategies

Apply the latest kernel update provided by your Linux distribution to patch this vulnerability. If immediate patching is not possible, consider disabling the vfio_ccw module temporarily using modprobe -r vfio_ccw, but this may impact s390 device functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80552. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart