CVE-2026-80547: s390/vfio_ccw: Implement a crw lock
In the Linux kernel, the following vulnerability has been resolved:
s390/vfioccw: Implement a crw lock
Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies exclusively on asynchronous events coming from hardware.
Implement a lock to manage the list of those payloads, to ensure they are read cohesively.
Event History
Frequently Asked Questions
Which systems are most likely to be exposed?
The issue is in the Linux kernel s390 vfio_ccw code path. Exposure therefore depends on using that architecture and subsystem; the provided information does not identify affected kernel versions or configurations.
What condition triggers the issue?
The vulnerability involves asynchronous hardware events in the CRW region and concurrent handling of their payload list. The provided information does not state whether an unprivileged or remote attacker can trigger those events.
What is the available remediation?
The vulnerability is described as resolved by implementing a lock that ensures CRW payloads are read cohesively. Three stable-kernel commit references are provided, but no release versions or interim mitigations are specified.