CVE-2026-80921
High
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedSep 9, 2026
First seenSep 9, 2026
How to fix
Update
- Linux Linuxd110b3297f11ef227098b8a82ade2d5f123b7d2f, 59d51550b5cb916bda037673a721a404b3b47a0d, f6079dca67eccb5eabef9f72437948c66dc5131f, 087c19cc60a8caa1a08e1e434c8be2caf6c27733, 7d23489f51109e3ebba5b5db8c5f0185af7b7fdf, 935eeba276012916c76243e5cbb843efd8fdb75d, d4bcd2df6d0d2af916b4fe1a533958778ea7c45b, 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6, 34d5b5b646c91cfb9338d7a12c955a70ffb8c66b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < d110b3297f11ef227098b8a82ade2d5f123b7d2f, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 59d51550b5cb916bda037673a721a404b3b47a0d, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < f6079dca67eccb5eabef9f72437948c66dc5131f, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 087c19cc60a8caa1a08e1e434c8be2caf6c27733, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 7d23489f51109e3ebba5b5db8c5f0185af7b7fdf, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 935eeba276012916c76243e5cbb843efd8fdb75d, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < d4bcd2df6d0d2af916b4fe1a533958778ea7c45b, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6, 6b79de4b056e5a2febc0c61233d8f0ad7868e49c ≤ v < 34d5b5b646c91cfb9338d7a12c955a70ffb8c66b, 4.20 | d110b3297f11ef227098b8a82ade2d5f123b7d2f, 59d51550b5cb916bda037673a721a404b3b47a0d, f6079dca67eccb5eabef9f72437948c66dc5131f, 087c19cc60a8caa1a08e1e434c8be2caf6c27733, 7d23489f51109e3ebba5b5db8c5f0185af7b7fdf, 935eeba276012916c76243e5cbb843efd8fdb75d, d4bcd2df6d0d2af916b4fe1a533958778ea7c45b, 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6, 34d5b5b646c91cfb9338d7a12c955a70ffb8c66b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.