Vulnerability in Linux Kernel Affecting s390/vfio_ccw Components

CVE-2026-80552

What is CVE-2026-80552?

The Linux Kernel is susceptible to a vulnerability within the s390/vfio_ccw components, where insufficient enforcement of index ranges for read/write regions can lead to unpredictable behavior. This oversight means that while region indexes for newly introduced capabilities are properly clamped, established read/write regions were not similarly restricted. This could result in unauthorized access or manipulation of memory regions, potentially leading to system instability or compromise.

References