Linux Kernel Vulnerability in S390/VFIO_CCW by Linux Foundation

CVE-2026-80547

What is CVE-2026-80547?

A vulnerability has been identified in the Linux Kernel affecting the S390 VFIO_CCW subsystem. This issue involves the CRW region, which solely depends on asynchronous events from hardware. The lack of a proper locking mechanism may lead to inconsistent reads of payloads, potentially causing system instability or unintended behavior. A patch has been introduced to implement a cohesive locking strategy, enhancing the synchronization of operations involving CRW payloads and ensuring stable performance. Users are advised to update their systems to the latest version to mitigate this risk.

References