Riskcovery

CVE-2026-80549

s390/vfio_ccw: Move cp cleanup out of not operational

State
Published
Severity
8.2 High
Published
Aug 26, 2026
Updated
Oct 16, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Move cp cleanup out of not operational

The fsm_notoper() routine is called when the device has been lost, and is (by definition) no longer operational. Since this can happen asynchronously from the normal behavior of the driver, the cleanup may happen when holding other locks in the calling sequence (notably, the cio subchannel lock).

Push the cleanup of the private->cp resources to a workqueue, where it can be done out from under that lock sequence and a future patch can safely manage the locking requirements.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 204b394a23ad5e30944f23518e21e844614da2ff to before c9b85aa2cf73ea645e55e2c2670e0ddebfe1589bAffected
  • 204b394a23ad5e30944f23518e21e844614da2ff to before f98a9890ca42f4223d2d4c50e0660af3e012fcb4Affected
  • 204b394a23ad5e30944f23518e21e844614da2ff to before 4e3301e2a651d742c05914f6074a25b8e41bce19Affected
  • 204b394a23ad5e30944f23518e21e844614da2ff to before af1759d8e6e6da9ba94f30a2f92546f406899aa7Affected
  • 204b394a23ad5e30944f23518e21e844614da2ff to before 56100baa0eb7055b1026dfa73e696e8066ff71fdAffected
  • 204b394a23ad5e30944f23518e21e844614da2ff to before 0c11f61a876ed6fcca53d442ed3f33ea8362a0f9Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.185 through 6.1.*Not affected
  • 6.6.153 through 6.6.*Not affected
  • 6.12.105 through 6.12.*Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.