CVE-2026-80549

s390/vfio_ccw: Move cp cleanup out of not operational

HIGH
8.2
CVSS Score
Published: August 26, 2026 at 02:37 PM UTC
Updated: October 16, 2026 at 08:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.2
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the device has been lost, and is (by definition) no longer operational. Since this can happen asynchronously from the normal behavior of the driver, the cleanup may happen when holding other locks in the calling sequence (notably, the cio subchannel lock). Push the cleanup of the private->cp resources to a workqueue, where it can be done out from under that lock sequence and a future patch can safely manage the locking requirements.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

204b394a23ad5e30944f23518e21e844614da2ff6.0
Vendor states this is fixed in 0c11f61a876ed6fcca53d442ed3f33ea8362a0f9 (fixed)
Vendor states this is fixed in 4e3301e2a651d742c05914f6074a25b8e41bce19 (fixed)
Vendor states this is fixed in 56100baa0eb7055b1026dfa73e696e8066ff71fd (fixed)
Vendor states this is fixed in af1759d8e6e6da9ba94f30a2f92546f406899aa7 (fixed)
Vendor states this is fixed in c9b85aa2cf73ea645e55e2c2670e0ddebfe1589b (fixed)
Vendor states this is fixed in f98a9890ca42f4223d2d4c50e0660af3e012fcb4 (fixed)
Vendor states this is fixed in 6.0 (unaffected)
Vendor states this is fixed in 6.1.185 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.2HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card