01 Record

CVE-2026-80550

s390/vfio_ccw: Fix out of bounds check on CCW array

HighPUBLISHEDCNA: Linux

CNA base score7.9 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

View raw JSON

02 Description

s390/vfio_ccw: Fix out of bounds check on CCW array

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 7.3% of scored records. A rank, not a probability.

NVD base score

7.9 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

NVD analysis status

Received. NVD last modified this record on 2026-10-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 14:37Z2 MO AGO

Last updated

2026-10-16 19:26Z12 DAYS AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.9)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

1c7881375ede6bbe61694f7c08f3e7c2a56f5d5045ecf55a2b3ac730742f3268

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0a19e61e6d4c6192077ead760ba0a2d350987d4c to < 0282fb1c4b638eecfe2cc558092c460911d8f7e2, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < 907adc667d902fafbdb2d740d57b55bd025dc4cd, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < f20be33d093ce7630c17ff7ed93caf7eaf8ac1a3, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < af3f80ca4c8b17f20f9e588def076288fdb49e65, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < 499a8a66b1598bfab97182aed15e0f1646074a3d, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < 4c2e1d359d7a2b82cdf3254e4e480af9417f99fb, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < d5d096cd9369e986d4e5153baa86b8b35c283e09, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to < a005b7f1a491ffda61bff0fd0f6548f8986fb977, 4.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0282fb1c4b638eecfe2cc558092c460911d8f7e2
git.kernel.orghttps://git.kernel.org/stable/c/907adc667d902fafbdb2d740d57b55bd025dc4cd
git.kernel.orghttps://git.kernel.org/stable/c/f20be33d093ce7630c17ff7ed93caf7eaf8ac1a3
git.kernel.orghttps://git.kernel.org/stable/c/af3f80ca4c8b17f20f9e588def076288fdb49e65
git.kernel.orghttps://git.kernel.org/stable/c/499a8a66b1598bfab97182aed15e0f1646074a3d
git.kernel.orghttps://git.kernel.org/stable/c/4c2e1d359d7a2b82cdf3254e4e480af9417f99fb
git.kernel.orghttps://git.kernel.org/stable/c/d5d096cd9369e986d4e5153baa86b8b35c283e09
git.kernel.orghttps://git.kernel.org/stable/c/a005b7f1a491ffda61bff0fd0f6548f8986fb977

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.