Linux Kernel Memory Management Issue in s390/vfio_ccw

CVE-2026-80555

What is CVE-2026-80555?

The vulnerability within the Linux kernel's s390/vfio_ccw component results from improper memory management when the cp_init() function fails. If cp->initialized is not set, the cp_free() routine cannot deallocate memory properly, leading to potential memory leaks of CCW segments associated with the same channel program. Although there is an attempt to address this issue in ccwchain_handle_ccw(), it only mitigates the problem for the current CCW segment. To fully resolve the memory leak issue, it is essential to implement cleanup outside the recursive logic of ccwchain_handle_ccw() and ccwchain_loop_tic().

References