CVE-2026-80553

HighCVSS 8.8/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Cancel existing workqueues

The initialization of the io_work and crw_work workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in _release_dev to ensure work isn't dispatched after the private struct is free'd.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e5f84dbaea59b4f712dac428c337528b70e1c533, < 87d569cb35a541b31a184faf982540694d4c9a89; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < b94b28c1f0fae53b2f2d6180ae6442c9a1558f67; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < e868ea8be0bc88c6982f48ecf3259d98afd884ae; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < dc47a98abe6714577a25224534dbd356051097a3; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < b7ae0f7993867d009a4b554fc1d6d451c10580a0; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2; >= e5f84dbaea59b4f712dac428c337528b70e1c533, < 79c60b2c61105368dcc8444eb45847e21734f7c4
LinuxLinux4.12

References

Timeline

Published
Aug 26, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805549.3In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The procesCVE-2026-805557.1In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free(CVE-2026-805567.8In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditioCVE-2026-805579.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via missing bounds check ceCVE-2026-805589.8In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corruptedCVE-2026-805597.8In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40_probe()CVE-2026-80568.8IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical securitCVE-2026-805607.8In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoCVE-2026-805619.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker(CVE-2026-80562In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use raw_spinlock_t for the register lock ioh_irq_type() CVE-2026-80563In the Linux kernel, the following vulnerability has been resolved: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on CVE-2026-80564In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL derefere
CVE-2026-80553: High severity, CVSS 8.8 | Vulnix