by Kastro
Paper/Archive/CVE-2026-80684

CVE-2026-80684

Linux Linux — KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 9.3.093 × 201.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

Affected

ProductAffectedFixed inSource
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < 96099486b63985801c9c6ef22505e9aa635b2d2096099486b63985801c9c6ef22505e9aa635b2d20CNA
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < 0a95abe964400771ad82b027d7b84a0d183cd0db0a95abe964400771ad82b027d7b84a0d183cd0dbCNA
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < df947d85e164a50a29d43a96e814f69ab1d0f7eddf947d85e164a50a29d43a96e814f69ab1d0f7edCNA
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < e137d082325bbcae780087b57501d38585e625d9e137d082325bbcae780087b57501d38585e625d9CNA
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < d1a103dc9016c25e7423ce5841a5cc2df76d59f3d1a103dc9016c25e7423ce5841a5cc2df76d59f3CNA
Linux3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc – < 8bf09b9b7d3232806df95f409581f8a9fd99a3fa8bf09b9b7d3232806df95f409581f8a9fd99a3faCNA
Linux6.06.1.183CNA

Scores by source

Linux (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgit.kernel.org/stable/c/96099486b63985801c9c6ef22505e9aa635b2d20refgit.kernel.org/stable/c/0a95abe964400771ad82b027d7b84a0d183cd0dbrefgit.kernel.org/stable/c/df947d85e164a50a29d43a96e814f69ab1d0f7edrefgit.kernel.org/stable/c/e137d082325bbcae780087b57501d38585e625d9refgit.kernel.org/stable/c/d1a103dc9016c25e7423ce5841a5cc2df76d59f3refgit.kernel.org/stable/c/8bf09b9b7d3232806df95f409581f8a9fd99a3fa