SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80549

HIGH · CVSS 8.2 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's s390/vfio_ccw driver, specifically in the handling of cleanup routines when a device is lost and marked as non-operational. This flaw can lead to potential deadlocks due to improper locking during the cleanup process, which could impact system stability and performance. Organizations using Linux systems with this driver should prioritize addressing this issue to mitigate risks associated with device management and system reliability.

CVE
CVE-2026-80549
Severity
HIGH
CVSS
8.2
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the device has been lost, and is (by definition) no longer operational. Since this can happen asynchronously from the normal behavior of the driver, the cleanup may happen when holding other locks in the calling sequence (notably, the cio subchannel lock). Push the cleanup of the private->cp resources to a workqueue, where it can be done out from under that lock sequence and a future patch can safely manage the locking requirements.