Lucene search
+L

253400 matches found

Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.7 views

CVE-2026-80552

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing...

8.8CVSS5.3AI score0.00129EPSS
SaveExploits0
CVE
CVE
added 2026/08/26 2:37 p.m.17 views

CVE-2026-80552

CVE-2026-80552 affects the Linux kernel on s390 architectures, specifically the vfio_ccw driver. When the capability chain was introduced, it correctly clamped region indexes to the capability range but neglected to apply the same bounds check to existing read/write regions , allowing out-of-rang...

8.8CVSS5.3AI score0.00129EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/26 2:37 p.m.14 views

CVE-2026-80553

CVE-2026-80553 affects the Linux kernel 's s390/vfio_ccw driver, used for channel-to-channel I/O on the s390 architecture. The root cause is that the io_work and crw_work workqueues are initialized during device setup but never cancelled during device release (_release_dev). This means work items...

8.8CVSS5.3AI score0.00128EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/26 2:37 p.m.34 views

CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

8.8CVSS0.00128EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.7 views

CVE-2026-80553

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

8.8CVSS5.3AI score0.00128EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 2:37 p.m.4 views

CVE-2026-80552 s390/vfio_ccw: Ensure index for read/write regions are within range

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing...

8.8CVSS5.6AI score
SaveExploits0References10
OSV
OSV
added 2026/08/26 2:37 p.m.4 views

CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

8.8CVSS5.6AI score
SaveExploits0References11
OSV
OSV
added 2026/08/26 2:37 p.m.4 views

CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

9.3CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/26 2:37 p.m.33 views

CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

9.3CVSS0.00144EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.5 views

CVE-2026-80551

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

9.3CVSS5.6AI score0.00144EPSS
SaveExploits0
CVE
CVE
added 2026/08/26 2:37 p.m.19 views

CVE-2026-80551

CVE-2026-80551 affects the s390/vfio_ccw subsystem in the Linux kernel. The vulnerability stems from the first IDAW in a list being read separately (since it does not require 2K/4K alignment like subsequent entries) to calculate the buffer size for reading the full IDAL. The fix verifies that the...

9.3CVSS5.7AI score0.00144EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/26 2:37 p.m.34 views

CVE-2026-80549 s390/vfio_ccw: Move cp cleanup out of not operational

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

8.2CVSS0.00134EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.5 views

CVE-2026-80549

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

8.2CVSS5.4AI score0.00134EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.6 views

CVE-2026-80550

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a single channel program, and rejects anything larger than...

7.9CVSS5.5AI score0.00137EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 2:37 p.m.8 views

CVE-2026-80549 s390/vfio_ccw: Move cp cleanup out of not operational

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

8.2CVSS5.7AI score
SaveExploits0References9
OSV
OSV
added 2026/08/26 2:37 p.m.5 views

CVE-2026-80550 s390/vfio_ccw: Fix out of bounds check on CCW array

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a single channel program, and rejects anything larger than...

7.9CVSS5.7AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/08/26 2:37 p.m.32 views

CVE-2026-80550 s390/vfio_ccw: Fix out of bounds check on CCW array

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a single channel program, and rejects anything larger than...

7.9CVSS0.00137EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/26 2:37 p.m.11 views

CVE-2026-80550

CVE-2026-80550 is an out-of-bounds read in the Linux kernel s390/vfio_ccw driver. The function ccwchain_calc_length() iterates over chained channel command words (CCWs) with a do..while (count

7.9CVSS5.5AI score0.00137EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/26 2:37 p.m.19 views

CVE-2026-80549

This CVE affects the s390/vfio_ccw driver in the Linux kernel. The fsm_notoper() routine is invoked when a channel-attached device is lost; because this can occur asynchronously, the cleanup of private->cp resources may execute while other locks (notably the cio subchannel lock ) are held in t...

8.2CVSS5.4AI score0.00134EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.5 views

CVE-2026-80548

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share. With the handful of race...

8.8CVSS5.4AI score0.00128EPSS
SaveExploits0
Rows per page
Query Builder