ReviewCritical

CVE-2026-80551

Linux

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full IDAL. Verify that the address found in the first IDAW is unchanged between reads, to ensure a consistent set of IDAWs being worked with.

CVSS: 9.3
EPSS: -
CISA KEV: Not listed
Published: 2026.08.27

PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 9.3

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 01aa26c672c0eb771de4aaa2a8ccf6055778887b < 460b977a4e71cc319fdadf91c193ec3beaa57263, >= 01aa26c672c0eb771de4aaa2a8ccf6055778887b < 0d46c2565f173bcddcdcaf44a4f69789a20535e2, >= 01aa26c672c0eb771de4aaa2a8ccf6055778887b < 08ef2a82115690d6e229615872ac1731af732497, >= 01aa26c672c0eb771de4aaa2a8ccf6055778887b < fc59e9482117ebdccd6dc7fa8082f8b980fd021e, >= 01aa26c672c0eb771de4aaa2a8ccf6055778887b < 565bef268d75bf7df665bce6923a88cd0eb74592, >= 5.3
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE: Not available