Critical severity · published Aug 26, 2026
CVE-2026-80551
s390/vfio_ccw: Ensure first IDAW remains constant
9.3
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio_ccw: Ensure first IDAW remains constant
The first IDAW in a list does not need to be on a 2K/4K boundary
like all others, and so is read separately to accurately calculate
the size of the buffer needed to read the full IDAL.
Verify that the address found in the first IDAW is unchanged between
reads, to ensure a consistent set of IDAWs being worked with.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
01aa26c672c0eb771de4aaa2a8ccf6055778887b before 460b977a4e71cc319fdadf91c193ec3beaa57263; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 0d46c2565f173bcddcdcaf44a4f69789a20535e2; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 08ef2a82115690d6e229615872ac1731af732497; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before fc59e9482117ebdccd6dc7fa8082f8b980fd021e; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 565bef268d75bf7df665bce6923a88cd0eb74592; 5.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-80551
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-80551
git.kernel.org
https://git.kernel.org/stable/c/08ef2a82115690d6e229615872ac1731af732497
git.kernel.org
https://git.kernel.org/stable/c/0d46c2565f173bcddcdcaf44a4f69789a20535e2
git.kernel.org
https://git.kernel.org/stable/c/460b977a4e71cc319fdadf91c193ec3beaa57263
git.kernel.org
https://git.kernel.org/stable/c/565bef268d75bf7df665bce6923a88cd0eb74592
git.kernel.org
https://git.kernel.org/stable/c/fc59e9482117ebdccd6dc7fa8082f8b980fd021e
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()