CVE-2026-80684
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Linux
PublishedAug 28, 2026
First seenAug 28, 2026
How to fix
Update
- Linux Linux96099486b63985801c9c6ef22505e9aa635b2d20, 0a95abe964400771ad82b027d7b84a0d183cd0db, df947d85e164a50a29d43a96e814f69ab1d0f7ed, e137d082325bbcae780087b57501d38585e625d9, d1a103dc9016c25e7423ce5841a5cc2df76d59f3, 8bf09b9b7d3232806df95f409581f8a9fd99a3fa or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 96099486b63985801c9c6ef22505e9aa635b2d20, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 0a95abe964400771ad82b027d7b84a0d183cd0db, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < df947d85e164a50a29d43a96e814f69ab1d0f7ed, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < e137d082325bbcae780087b57501d38585e625d9, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < d1a103dc9016c25e7423ce5841a5cc2df76d59f3, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 8bf09b9b7d3232806df95f409581f8a9fd99a3fa, 6.0 | 96099486b63985801c9c6ef22505e9aa635b2d20, 0a95abe964400771ad82b027d7b84a0d183cd0db, df947d85e164a50a29d43a96e814f69ab1d0f7ed, e137d082325bbcae780087b57501d38585e625d9, d1a103dc9016c25e7423ce5841a5cc2df76d59f3, 8bf09b9b7d3232806df95f409581f8a9fd99a3fa |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.