CVE-2026-80548

Source
https://cve.org/CVERecord?id=CVE-2026-80548
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80548.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-80548
Downstream
Published
2026-08-26T14:37:18.759Z
Modified
2026-08-28T03:47:25.886622018Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
s390/vfio_ccw: Selectively expand io_mutex
Details

In the Linux kernel, the following vulnerability has been resolved:

s390/vfioccw: Selectively expand iomutex

The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share.

With the handful of races that are possible, the choices are either to: A) expand the scope of iomutex to close these remaining windows, or B) reduce the scope of iomutex to just io_region, and introduce a new lock mechanism for the remaining I/O resources

This patch implements A, since B brings with it a lot more interactions that would need to be tracked and kept in a correct hierarchy. It also takes advantage of the workqueue element for cpfree() that now gets called out of fsmnotoper(), which could be invoked out of an interrupt context and thus cannot acquire a mutex itself.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80548.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4f76617378ee97c557b526cb58d3c61eb0a9c963
Fixed
dab6a6627b0b0cce23653e99c7b0bf8c6cfd82e0
Fixed
56d7488533ceac4e986e96e15c9e487a2245bc01
Fixed
f72a51810d49411bd8cad0c2df8592320a2fe5cc
Fixed
2ba9efdf9ebedc4e54df4b56aa3b43a65f7967cd
Fixed
b6aecea4b2b246f9fbd98a5712daa1193a60818e
Fixed
2a5ac0c0f1f7da33929211a2e41911bf72ee35d8
Fixed
34f4feff3e90bd09308fad0974e97113b23b812a

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80548.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.15.218
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.185
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.153
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.105
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.46
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80548.json"