CVE-2026-80553
Received Received - Intake

s390/vfio_ccw Workqueue Cleanup Flaw

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the io_work and crw_work workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in _release_dev to ensure work isn't dispatched after the private struct is free'd.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80553
EUVD
EUVD-2026-66468

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper cleanup of workqueues in the s390/vfio_ccw driver. The io_work and crw_work workqueues are initialized but not properly uninitialized during device release, which could lead to work being dispatched after the associated data structures are freed.

Impact Analysis

This vulnerability may cause system instability or crashes if workqueues attempt to access freed memory. It primarily affects systems using the s390/vfio_ccw driver, potentially leading to denial-of-service conditions or other unexpected behavior.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80553. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart