CVE-2026-80552

HighCVSS 8.8/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Ensure index for read/write regions are within range

The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < 3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < d3b1e38404b22df5a1f93019f2bb656feaad5ae3; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < 79ea5e0c4c8a9842ae85f45062d947b3297dfc07; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < d597fa1273802941c7801202135976fecc29672b; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < 649badf3a2fd8929e40198603a2cb21b74c21700; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < 988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf; >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871, < 9f5f9a78fedc45bc29d6a0a64e3a3472361afae5
LinuxLinux5.2

References

Timeline

Published
Aug 26, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805538.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the ioCVE-2026-805549.3In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The procesCVE-2026-805557.1In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free(CVE-2026-805567.8In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditioCVE-2026-805579.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via missing bounds check ceCVE-2026-805589.8In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corruptedCVE-2026-805597.8In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40_probe()CVE-2026-80568.8IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical securitCVE-2026-805607.8In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoCVE-2026-805619.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker(CVE-2026-80562In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use raw_spinlock_t for the register lock ioh_irq_type() CVE-2026-80563In the Linux kernel, the following vulnerability has been resolved: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on
CVE-2026-80552: High severity, CVSS 8.8 | Vulnix