CVE-2026-80551

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full IDAL. Verify that the address found in the first IDAW is unchanged between reads, to ensure a consistent set of IDAWs being worked with.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/08ef2a82115690d6e229615872ac1731af732497
https://git.kernel.org/stable/c/0d46c2565f173bcddcdcaf44a4f69789a20535e2
https://git.kernel.org/stable/c/460b977a4e71cc319fdadf91c193ec3beaa57263
https://git.kernel.org/stable/c/565bef268d75bf7df665bce6923a88cd0eb74592
https://git.kernel.org/stable/c/fc59e9482117ebdccd6dc7fa8082f8b980fd021e

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-26 15:17

Updated : 2026-08-27 13:18

NVD link : CVE-2026-80551

Mitre link : CVE-2026-80551

CVE.ORG link : CVE-2026-80551

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-80551", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.5}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "01aa26c672c0eb771de4aaa2a8ccf6055778887b", "lessThan": "460b977a4e71cc319fdadf91c193ec3beaa57263", "versionType": "git"}, {"status": "affected", "version": "01aa26c672c0eb771de4aaa2a8ccf6055778887b", "lessThan": "0d46c2565f173bcddcdcaf44a4f69789a20535e2", "versionType": "git"}, {"status": "affected", "version": "01aa26c672c0eb771de4aaa2a8ccf6055778887b", "lessThan": "08ef2a82115690d6e229615872ac1731af732497", "versionType": "git"}, {"status": "affected", "version": "01aa26c672c0eb771de4aaa2a8ccf6055778887b", "lessThan": "fc59e9482117ebdccd6dc7fa8082f8b980fd021e", "versionType": "git"}, {"status": "affected", "version": "01aa26c672c0eb771de4aaa2a8ccf6055778887b", "lessThan": "565bef268d75bf7df665bce6923a88cd0eb74592", "versionType": "git"}], "programFiles": ["drivers/s390/cio/vfio_ccw_cp.c", "drivers/s390/cio/vfio_ccw_cp.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.3"}, {"status": "unaffected", "version": "0", "lessThan": "5.3", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.154", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.105", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.46", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.10", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/s390/cio/vfio_ccw_cp.c", "drivers/s390/cio/vfio_ccw_cp.h"], "defaultStatus": "affected"}]}], "published": "2026-08-26T15:17:09.610", "references": [{"url": "https://git.kernel.org/stable/c/08ef2a82115690d6e229615872ac1731af732497", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/0d46c2565f173bcddcdcaf44a4f69789a20535e2", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/460b977a4e71cc319fdadf91c193ec3beaa57263", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/565bef268d75bf7df665bce6923a88cd0eb74592", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fc59e9482117ebdccd6dc7fa8082f8b980fd021e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio_ccw: Ensure first IDAW remains constant\n\nThe first IDAW in a list does not need to be on a 2K/4K boundary\nlike all others, and so is read separately to accurately calculate\nthe size of the buffer needed to read the full IDAL.\n\nVerify that the address found in the first IDAW is unchanged between\nreads, to ensure a consistent set of IDAWs being worked with."}], "lastModified": "2026-08-27T13:18:39.733", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}