CVE-2026-80554
Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary (but not architectural) limit to the number of CCWs that can exist in a single channel program. The vfio-ccw logic breaks these channel programs into segments whenever it encounters a Transfer-In-Channel (TIC) CCW, and the combined number of segments count towards the global limit. Impose an equivalent limit to the number of segments until such logic can be made non-recursive.
How to fix
- Linux Linux2ce00bb19db13606cda79f4b7aae4d9775de3096, 15fb4559a7fdf0b8725e433a71cfd03a1313a48b, a1625f66eaa1200068a0e2c05bc90e65182fc4e3, 06f4d6e5a8af6c2072e8cd39dbc512c683ca7fb2, 4ee94790490ae8dcc97df8597f07836c8a81bbcf, 5405c90d6a47b3014e74ee0618a162449abbbc93 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < 2ce00bb19db13606cda79f4b7aae4d9775de3096, 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < 15fb4559a7fdf0b8725e433a71cfd03a1313a48b, 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < a1625f66eaa1200068a0e2c05bc90e65182fc4e3, 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < 06f4d6e5a8af6c2072e8cd39dbc512c683ca7fb2, 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < 4ee94790490ae8dcc97df8597f07836c8a81bbcf, 0a19e61e6d4c6192077ead760ba0a2d350987d4c ≤ v < 5405c90d6a47b3014e74ee0618a162449abbbc93, 4.12 | 2ce00bb19db13606cda79f4b7aae4d9775de3096, 15fb4559a7fdf0b8725e433a71cfd03a1313a48b, a1625f66eaa1200068a0e2c05bc90e65182fc4e3, 06f4d6e5a8af6c2072e8cd39dbc512c683ca7fb2, 4ee94790490ae8dcc97df8597f07836c8a81bbcf, 5405c90d6a47b3014e74ee0618a162449abbbc93 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.