SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80552

HIGH · CVSS 8.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically in the s390/vfio_ccw component, where read/write region indexes are not properly constrained within the defined capability range. This oversight could lead to unauthorized access or manipulation of memory regions, potentially compromising system integrity. Organizations using affected Linux systems, particularly those relying on s390 architecture, should prioritize addressing this issue to mitigate risks associated with memory access violations.

CVE
CVE-2026-80552
Severity
HIGH
CVSS
8.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.