CVE-2026-80555

This vulnerability affects the s390/vfio_ccw component of the Linux kernel . When cp_init() fails and cp->initialized is not set, the standard cp_free() routine cannot be used to release all allocated memory. The existing partial fix in ccwchain_handle_ccw() only frees the currently-processed ...

CVE-2026-80552

CVE-2026-80552 affects the Linux kernel's s390/vfio_ccw driver . The root cause is a missing bounds check: when the capability chain was introduced, region indexes were correctly clamped to the range of capabilities, but the same enforcement was neglected for existing read/write regions . This al...

CVE-2026-80549

CVE-2026-80549 affects the s390/vfio_ccw driver in the Linux kernel . The vulnerability stems from the fsm_notoper() routine, which is invoked when a CCW device has been lost and is no longer operational. Because this path can execute asynchronously while other locks are held—specifically the cio...

CVE-2026-80548

This vulnerability affects the s390/vfio_ccw driver in the Linux kernel . The io_mutex lock, originally defined to serialize io_regions , had also been informally associated with I/O operations due to their close relationship. This left a small number of race condition windows unaddressed. The fi...