What’s Vulnerable › Vulnerabilities

CVE-2026-80547: s390/vfio_ccw: Implement a crw lock

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-26 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the channel_program struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware. Implement a lock to manage the list of those payloads, to ensure they are read cohesively.

Affected products

• Linux kernel: 5.8 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0edd222730a9d7ec98368aaf1d40ee2d8d862e61
• https://git.kernel.org/stable/c/16b0798024c0e9117e395829ddbbe70981c79d9c
• https://git.kernel.org/stable/c/3c94d4179bcc19e01b28db634c07a58b28116209
• https://git.kernel.org/stable/c/49fa26b0df009dc1f420980bd71780e70615b83b
• https://git.kernel.org/stable/c/7902be374cbfc11c3435e1e87bf22195bf06a558
• https://git.kernel.org/stable/c/a3d60ae24183eee352c8e87a0ff94c97cd87f156
• https://git.kernel.org/stable/c/c76c4ee72bfc3824f4f491f18ed0323bf2e2daf9

Get alerted when CVE-2026-80547 or the next vulnerability affects your stack