CVE-2026-80551

s390/vfio_ccw: Ensure first IDAW remains constant

State: Published
Severity: 9.3 Critical
Published: Aug 26, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Ensure first IDAW remains constant

The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full IDAL.

Verify that the address found in the first IDAW is unchanged between reads, to ensure a consistent set of IDAWs being worked with.

Scores

CVSS	Score	Vector	Source
3.1	9.3 Critical	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 5b7c23440343e336259cd45017cc901a744c41b0Affected 01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 460b977a4e71cc319fdadf91c193ec3beaa57263Affected 01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 0d46c2565f173bcddcdcaf44a4f69789a20535e2Affected 01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 08ef2a82115690d6e229615872ac1731af732497Affected 01aa26c672c0eb771de4aaa2a8ccf6055778887b to before fc59e9482117ebdccd6dc7fa8082f8b980fd021eAffected 01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 565bef268d75bf7df665bce6923a88cd0eb74592Affected
LinuxLinux	5.3Affected before 5.3Not affected 6.1.191 through 6.1.Not affected 6.6.154 through 6.6.Not affected 6.12.105 through 6.12.Not affected 6.18.46 through 6.18.Not affected 7.1.10 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 5b7c23440343e336259cd45017cc901a744c41b0Affected
01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 460b977a4e71cc319fdadf91c193ec3beaa57263Affected
01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 0d46c2565f173bcddcdcaf44a4f69789a20535e2Affected
01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 08ef2a82115690d6e229615872ac1731af732497Affected
01aa26c672c0eb771de4aaa2a8ccf6055778887b to before fc59e9482117ebdccd6dc7fa8082f8b980fd021eAffected
01aa26c672c0eb771de4aaa2a8ccf6055778887b to before 565bef268d75bf7df665bce6923a88cd0eb74592Affected

LinuxLinux

5.3Affected
before 5.3Not affected
6.1.191 through 6.1.*Not affected
6.6.154 through 6.6.*Not affected
6.12.105 through 6.12.*Not affected
6.18.46 through 6.18.*Not affected
7.1.10 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.