CVE-2026-80891
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a single page boundary, then reject the request as we cannot safely pin the guest AIBV. Similarly reject the request if the AISB address is not 8-byte aligned as the architecture requires doubleword alignment for the summary bit address. Since the AISBO can address up to 64 bits, the size of the AISB can only be 8 bytes for the function. This also ensures the AISB doesn't exceed a single page boundary.
How to fix
- Linux Linux3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48, f00ef8efd41440129ccd88f4a1ebebf8d61d297f, 15df7700dd99f8a37f5c6ed2dcf1e33009cdba47, b878ba7e28144c9a857bc847d31f3c45413450ac, fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528, 868d32ac72cba21c5c6d8a66a814b7c25a3a5c01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < f00ef8efd41440129ccd88f4a1ebebf8d61d297f, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 15df7700dd99f8a37f5c6ed2dcf1e33009cdba47, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < b878ba7e28144c9a857bc847d31f3c45413450ac, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528, 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc ≤ v < 868d32ac72cba21c5c6d8a66a814b7c25a3a5c01, 6.0 | 3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48, f00ef8efd41440129ccd88f4a1ebebf8d61d297f, 15df7700dd99f8a37f5c6ed2dcf1e33009cdba47, b878ba7e28144c9a857bc847d31f3c45413450ac, fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528, 868d32ac72cba21c5c6d8a66a814b7c25a3a5c01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.