CVE-2026-80547

HighCVSS 8.8/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Implement a crw lock

Unlike the channel_program struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware.

Implement a lock to manage the list of those payloads, to ensure they are read cohesively.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < 3c94d4179bcc19e01b28db634c07a58b28116209; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < 0edd222730a9d7ec98368aaf1d40ee2d8d862e61; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < a3d60ae24183eee352c8e87a0ff94c97cd87f156; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < 49fa26b0df009dc1f420980bd71780e70615b83b; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < 7902be374cbfc11c3435e1e87bf22195bf06a558; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < c76c4ee72bfc3824f4f491f18ed0323bf2e2daf9; >= 3f02cb2fd9d2d9e8762102886e3e4b51285797ee, < 16b0798024c0e9117e395829ddbbe70981c79d9c
LinuxLinux5.8

References

Timeline

Published
Aug 26, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805488.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_mutex was defined toCVE-2026-805498.2In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper(CVE-2026-805507.9In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array The routine ccwchaCVE-2026-805519.3In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a CVE-2026-805528.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range ThCVE-2026-805538.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the ioCVE-2026-805549.3In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The procesCVE-2026-805557.1In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free(CVE-2026-805567.8In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditioCVE-2026-805579.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via missing bounds check ceCVE-2026-805589.8In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corruptedCVE-2026-805597.8In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40_probe()
CVE-2026-80547: High severity, CVSS 8.8 | Vulnix