CVE-2026-80684

CVE-2026-80684 affects the Linux kernel in the KVM s390 PCI subsystem. The root cause is that airq_iv_create() may return NULL on allocation failure, but its return value was never checked. As a result, zdev->aibv remains NULL and is later dereferenced in kvm_zpci_set_airq(), causing a NULL po...