CVE-2026-80553

High

Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The initialization of the io_work and crw_work workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in _release_dev to ensure work isn't dispatched after the private struct is free'd.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 26, 2026
First seenAug 26, 2026

How to fix

Update
  • Linux Linux87d569cb35a541b31a184faf982540694d4c9a89, 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7, b94b28c1f0fae53b2f2d6180ae6442c9a1558f67, e868ea8be0bc88c6982f48ecf3259d98afd884ae, dc47a98abe6714577a25224534dbd356051097a3, b7ae0f7993867d009a4b554fc1d6d451c10580a0, 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2, 79c60b2c61105368dcc8444eb45847e21734f7c4 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxe5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < 87d569cb35a541b31a184faf982540694d4c9a89, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < b94b28c1f0fae53b2f2d6180ae6442c9a1558f67, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < e868ea8be0bc88c6982f48ecf3259d98afd884ae, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < dc47a98abe6714577a25224534dbd356051097a3, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < b7ae0f7993867d009a4b554fc1d6d451c10580a0, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2, e5f84dbaea59b4f712dac428c337528b70e1c533 ≤ v < 79c60b2c61105368dcc8444eb45847e21734f7c4, 4.1287d569cb35a541b31a184faf982540694d4c9a89, 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7, b94b28c1f0fae53b2f2d6180ae6442c9a1558f67, e868ea8be0bc88c6982f48ecf3259d98afd884ae, dc47a98abe6714577a25224534dbd356051097a3, b7ae0f7993867d009a4b554fc1d6d451c10580a0, 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2, 79c60b2c61105368dcc8444eb45847e21734f7c4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80553 · Linux · Dark Radar