vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80553

s390/vfio_ccw: Cancel existing workqueues

HIGH
8.8
CVSS Score
Published: August 26, 2026 at 02:37 PM UTC
Updated: October 16, 2026 at 08:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the io_work and crw_work workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in _release_dev to ensure work isn't dispatched after the private struct is free'd.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.12e5f84dbaea59b4f712dac428c337528b70e1c533
Vendor states this is fixed in 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7 (fixed)
Vendor states this is fixed in 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2 (fixed)
Vendor states this is fixed in 79c60b2c61105368dcc8444eb45847e21734f7c4 (fixed)
Vendor states this is fixed in 87d569cb35a541b31a184faf982540694d4c9a89 (fixed)
Vendor states this is fixed in b7ae0f7993867d009a4b554fc1d6d451c10580a0 (fixed)
Vendor states this is fixed in b94b28c1f0fae53b2f2d6180ae6442c9a1558f67 (fixed)
Vendor states this is fixed in dc47a98abe6714577a25224534dbd356051097a3 (fixed)
Vendor states this is fixed in e868ea8be0bc88c6982f48ecf3259d98afd884ae (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 5.10.267 (unaffected)
Vendor states this is fixed in 5.15.218 (unaffected)
Vendor states this is fixed in 6.1.185 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/e868ea8be0bc88c6982f48ecf3259d98afd884ae
Source: cverecord
https://git.kernel.org/stable/c/dc47a98abe6714577a25224534dbd356051097a3
Source: cverecord
https://git.kernel.org/stable/c/b7ae0f7993867d009a4b554fc1d6d451c10580a0
Source: cverecord
https://git.kernel.org/stable/c/77f5e888d2e607a0b3141fb95091ad6ef1cca9a2
Source: cverecord
https://git.kernel.org/stable/c/79c60b2c61105368dcc8444eb45847e21734f7c4
Source: cverecord
https://git.kernel.org/stable/c/87d569cb35a541b31a184faf982540694d4c9a89
Source: cverecord
https://git.kernel.org/stable/c/7492ca2d0c5d59add01e267be9f5a6eeb8076fd7
Source: cverecord
https://git.kernel.org/stable/c/b94b28c1f0fae53b2f2d6180ae6442c9a1558f67

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card