PT-2026-82165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fsm notoper function within the s390/vfio ccw component. This routine is triggered when a device is lost and is no longer operational. Because this process can occ...

Linux Distros Unpatched Vulnerability : CVE-2026-80550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a...

PT-2026-82170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where channel programs and their contained Command Chain Words CCWs are processed recursively. The vfio-ccw logic divides these channel...

PT-2026-82168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the system failed to properly clamp the index for read/write regions to the range of the capabilities. While the capability chain...

PT-2026-82171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the s390/vfio ccw component when the cp init function fails. While the cp free routine is used to unpin or free memory after successful I/O or when cp prefetch...

PT-2026-82166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds check exists in the ccwchain calc length function. This routine counts the number of channel command words CCWs chained together in a single channel program and is...

PT-2026-82169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the io work and crw work workqueues were not properly un-initialized. This could allow work to be dispatched after the private...

PT-2026-82164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the s390/vfio ccw component. The io mutex was originally intended to serialize io regions but became associated with I/O operations due to their close...

PT-2026-82167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the first Indirect Data Address Word IDAW in a list is read separately to calculate the buffer size for the full Indirect Data Addres...

Linux Distros Unpatched Vulnerability : CVE-2026-80554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is ...

kernel security update

4.18.0-553.120.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

UBUNTU-CVE-2022-50307

In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix out-of-bounds access on cioignore free The channel-subsystem-driver scans for newly available devices whenever device-IDs are removed from the cioignore list using a command such as: echo free /proc/cioignore Since ...

The vulnerabilities of the s390/cio components of Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of the s390/cio component of the Linux operating system’s kernel is related to the state of the ccwdevicesetonline function. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...

CVE-2024-42099

A vulnerability was found in the s390/dasd subsystem in the Linux Kernel, where an invalid dereferencing of an indirect Channel Command Word CCW data pointer could cause a kernel panic. The issue occurs due to the CCW Command Data Address CDA pointer used with indirect addressing IDAW, which need...

CVE-2024-42099

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasdeckddumpsense that leads to a kernel panic in error cases. When using indirect addressing for DASD CC...

DEBIAN-CVE-2024-42099

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasdeckddumpsense that leads to a kernel panic in error cases. When using indirect addressing for DASD CC...

CVE-2024-42099

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasdeckddumpsense that leads to a kernel panic in error cases. When using indirect addressing for DASD CC...

CVE-2024-42099 s390/dasd: Fix invalid dereferencing of indirect CCW data pointer

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasdeckddumpsense that leads to a kernel panic in error cases. When using indirect addressing for DASD CC...

CVE-2024-42099

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasdeckddumpsense that leads to a kernel panic in error cases. When using indirect addressing for DASD CC...

CVE-2024-42099

The CVE-2024-42099 issue affects the Linux kernel on s390/dasd, where an invalid dereferencing of the indirect CCW data pointer (IDAW) could trigger a kernel panic in error paths. The root cause is that the CCW CDA pointer points to the IDAL, not directly to the data address, requiring translatio...