CVE-2026-80547

s390/vfio_ccw: Implement a crw lock

State: Published
Severity: 8.8 High
Published: Aug 26, 2026
Updated: Oct 16, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Implement a crw lock

Unlike the channel_program struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware.

Implement a lock to manage the list of those payloads, to ensure they are read cohesively.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 3c94d4179bcc19e01b28db634c07a58b28116209Affected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 0edd222730a9d7ec98368aaf1d40ee2d8d862e61Affected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before a3d60ae24183eee352c8e87a0ff94c97cd87f156Affected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 49fa26b0df009dc1f420980bd71780e70615b83bAffected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 7902be374cbfc11c3435e1e87bf22195bf06a558Affected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before c76c4ee72bfc3824f4f491f18ed0323bf2e2daf9Affected 3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 16b0798024c0e9117e395829ddbbe70981c79d9cAffected
LinuxLinux	5.8Affected before 5.8Not affected 5.15.218 through 5.15.Not affected 6.1.185 through 6.1.Not affected 6.6.154 through 6.6.Not affected 6.12.105 through 6.12.Not affected 6.18.46 through 6.18.Not affected 7.1.10 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 3c94d4179bcc19e01b28db634c07a58b28116209Affected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 0edd222730a9d7ec98368aaf1d40ee2d8d862e61Affected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before a3d60ae24183eee352c8e87a0ff94c97cd87f156Affected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 49fa26b0df009dc1f420980bd71780e70615b83bAffected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 7902be374cbfc11c3435e1e87bf22195bf06a558Affected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before c76c4ee72bfc3824f4f491f18ed0323bf2e2daf9Affected
3f02cb2fd9d2d9e8762102886e3e4b51285797ee to before 16b0798024c0e9117e395829ddbbe70981c79d9cAffected

LinuxLinux

5.8Affected
before 5.8Not affected
5.15.218 through 5.15.*Not affected
6.1.185 through 6.1.*Not affected
6.6.154 through 6.6.*Not affected
6.12.105 through 6.12.*Not affected
6.18.46 through 6.18.*Not affected
7.1.10 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.