CVE-2026-80555

This vulnerability affects the s390/vfio_ccw component of the Linux kernel . When cp_init() fails and cp->initialized is not set, the standard cp_free() routine cannot be used to release all allocated memory. The existing partial fix in ccwchain_handle_ccw() only frees the currently-processed ...

CVE-2026-80552

CVE-2026-80552 affects the Linux kernel's s390/vfio_ccw driver . The root cause is a missing bounds check: when the capability chain was introduced, region indexes were correctly clamped to the range of capabilities, but the same enforcement was neglected for existing read/write regions . This al...

CVE-2026-80553

CVE-2026-80553 affects the Linux kernel 's s390/vfio_ccw driver. The io_work and crw_work workqueues are not properly cancelled during device release (_release_dev), which can allow work to be dispatched after the private struct has been freed , resulting in a use-after-free condition. The fix ad...

CVE-2026-80551

CVE-2026-80551 affects the s390/vfio_ccw subsystem of the Linux kernel . The first IDAW in a list is read separately (as it is not required to be on a 2K/4K boundary like subsequent entries) to accurately calculate the buffer size needed to read the full IDAL . The vulnerability arises if the add...

CVE-2026-80549

CVE-2026-80549 affects the s390/vfio_ccw driver in the Linux kernel . The vulnerability stems from the fsm_notoper() routine, which is invoked when a CCW device has been lost and is no longer operational. Because this path can execute asynchronously while other locks are held—specifically the cio...

CVE-2026-80550

CVE-2026-80550 affects the s390/vfio_ccw driver in the Linux kernel . The vulnerability resides in the ccwchain_calc_length() routine, which counts chained channel command words (CCWs) in a single channel program. The loop uses a do..while (count

CVE-2026-80548

This vulnerability affects the s390/vfio_ccw driver in the Linux kernel . The io_mutex lock, originally defined to serialize io_regions , had also been informally associated with I/O operations due to their close relationship. This left a small number of race condition windows unaddressed. The fi...

CVE-2026-80547

CVE-2026-80547 affects the Linux kernel 's s390/vfio_ccw driver. The vulnerability arises because the CRW (Channel Retry Word) region relies exclusively on asynchronous events from hardware, yet lacks a dedicated lock to manage the list of those payloads. Without the lock, payloads may not be rea...