Riskcovery

CVE-2026-80684

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

State
Published
Severity
9.3 Critical
Published
Aug 28, 2026
Updated
Oct 16, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

Scores

CVSSScoreVectorSource
3.19.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 96099486b63985801c9c6ef22505e9aa635b2d20Affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 0a95abe964400771ad82b027d7b84a0d183cd0dbAffected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before df947d85e164a50a29d43a96e814f69ab1d0f7edAffected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before e137d082325bbcae780087b57501d38585e625d9Affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before d1a103dc9016c25e7423ce5841a5cc2df76d59f3Affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 8bf09b9b7d3232806df95f409581f8a9fd99a3faAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.151 through 6.6.*Not affected
  • 6.12.103 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.