CVE-2026-80552 - s390/vfio_ccw: Ensure index for read/write regions are within range

Back Back to CVE browser

HIGH

s390/vfio_ccw: Ensure index for read/write regions are within range

Published Aug 26, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.18%

Description

The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.2
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.2
- Version
  5.15.218
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.184
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.105
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.46
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.6.153
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  7.1.10
  Status
  unaffected
  Constraints
  <=7.1.*
- Version
  7.2
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.2	affected	-
0	unaffected	<5.2
5.15.218	unaffected	<=5.15.*
6.1.184	unaffected	<=6.1.*
6.12.105	unaffected	<=6.12.*
6.18.46	unaffected	<=6.18.*
6.6.153	unaffected	<=6.6.*
7.1.10	unaffected	<=7.1.*
7.2	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (12)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-80552		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2524509		Issue Tracking
https://git.kernel.org/stable/c/3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99
https://git.kernel.org/stable/c/649badf3a2fd8929e40198603a2cb21b74c21700
https://git.kernel.org/stable/c/79ea5e0c4c8a9842ae85f45062d947b3297dfc07
https://git.kernel.org/stable/c/988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf
https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5
https://git.kernel.org/stable/c/d3b1e38404b22df5a1f93019f2bb656feaad5ae3
https://git.kernel.org/stable/c/d597fa1273802941c7801202135976fecc29672b
https://lore.kernel.org/linux-cve-announce/2026082608-CVE-2026-80552-feb6@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-80552
https://www.cve.org/CVERecord?id=CVE-2026-80552