CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
The airqivcreate() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvmzpcisetairq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In airq_iv_create() failure paths, ensure kvm_zpci_set_airq() checks whether zdev->aibv is NULL before dereferencing it; prevent NULL dereference when the allocation returns NULL.
Linux kernel KVM s390 PCI NULL check for zdev->aibv after airq_iv_create() = add NULL guard and avoid dereference when airq_iv_create() returns NULL - Operational
After applying the fix, verify that the failure path in kvm_zpci_set_airq() properly frees any previously allocated AISB bit and zdev->aisb when AIBV allocation (airq_iv_create()) fails.