EUVD-2026-66469

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...

AZL-97772 CVE-2026-80554 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...

CVE-2026-80554 s390/vfio_ccw: Limit the number of channel program segments

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...

CVE-2026-80551 s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full...

PT-2026-82165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fsm notoper function within the s390/vfio ccw component. This routine is triggered when a device is lost and is no longer operational. Because this process can occ...

PT-2026-82163

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the CRW region, which relies exclusively on asynchronous events from hardware, lacks a proper locking mechanism. This necessitates th...

PT-2026-82171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the s390/vfio ccw component when the cp init function fails. While the cp free routine is used to unpin or free memory after successful I/O or when cp prefetch...

PT-2026-82170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where channel programs and their contained Command Chain Words CCWs are processed recursively. The vfio-ccw logic divides these channel...

PT-2026-82168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the system failed to properly clamp the index for read/write regions to the range of the capabilities. While the capability chain...

PT-2026-82169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the io work and crw work workqueues were not properly un-initialized. This could allow work to be dispatched after the private...

PT-2026-82164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the s390/vfio ccw component. The io mutex was originally intended to serialize io regions but became associated with I/O operations due to their close...

PT-2026-82167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the first Indirect Data Address Word IDAW in a list is read separately to calculate the buffer size for the full Indirect Data Addres...