From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 25E3443A81A for ; Wed, 26 Aug 2026 14:39:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787755177; cv=none; b=mvsIY8wq8uPCz1KD7mgpUK3u+ZvJRq7+HIJ+57BUENX4JcFmZGQEgs631ajdyMlcYANR+0sPtmOMgp3HDDvCJnaOMEgVOzMdS9L9W44ymglNaCFep5L6afM3epOiVHpVCoujJOTmGNnYvBySRl5RcJXe7Dx8dOmNIUTUAIINTU4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787755177; c=relaxed/simple; bh=LxNUBATwcLj0yk5H8Lnu5lN4ppJAoic29hOCsFtHsuE=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=QgeFQSo1AxtNcs90M+vFvbCO07s3jKfOYPBYYYgrwI9tsMMGWZHMbkb9MnjgTOiJVCbR3497uZIdGHJEl4ps8T/KSv6zDFrdpYCispkC/eT9ZZSb3vST7qgWL4j1z4mtDrSR/C63VRjqOf7BsX9XeES8KfSk6L5XsOtAINoe/Lc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=DEIO/AdO; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="DEIO/AdO" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 642391F000E9; Wed, 26 Aug 2026 14:39:30 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1787755170; bh=WvXL8kJce1Qidzp7Q4+DMPZu70L0z9ypObYSYA8rLBw=; h=From:To:Cc:Subject:Date:Reply-To; b=DEIO/AdOU5PTxvZcErkraKmLj+71ztHdyOk8WYDKM5yGC7nrg8aTiRx9vefo0RD2X C6qMiXgXS8T7oY358A4XcQO2aPwIfi4MuOjUheE8vz3UGAp5bUHylAO5wlm09ujPtr vjIBw86BhJz+O6xqxZ2HRxB37ndZMcfNH1Bk6eGI= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-80551: s390/vfio_ccw: Ensure first IDAW remains constant Date: Wed, 26 Aug 2026 16:37:47 +0200 Message-ID: <2026082608-CVE-2026-80551-e413@gregkh> X-Mailer: git-send-email 2.55.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2571; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=HO5I4Mft29e3Kxs1/5iX9EuOtETx0xHj5yxO1zQ5CIA=; b=owGbwMvMwCRo6H6F97bub03G02pJDFl9v0TcLv3o2xw2O9rkueIOM7b24Di/6guh0Yd3X+p6u vK0D/P2jlgWBkEmBlkxRZYv23iO7q84pOhlaHsaZg4rE8gQBi5OAZjInn6GeZpWSVoy9g5/OObf /meSeUDkmrlaJ8M81YkLGfboHArZszJjz49Ky9spK5TNAQ== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to accurately calculate the size of the buffer needed to read the full IDAL. Verify that the address found in the first IDAW is unchanged between reads, to ensure a consistent set of IDAWs being worked with. The Linux kernel CVE team has assigned CVE-2026-80551 to this issue. Affected and fixed versions =========================== Issue introduced in 5.3 with commit 01aa26c672c0eb771de4aaa2a8ccf6055778887b and fixed in 6.12.105 with commit 0d46c2565f173bcddcdcaf44a4f69789a20535e2 Issue introduced in 5.3 with commit 01aa26c672c0eb771de4aaa2a8ccf6055778887b and fixed in 6.18.46 with commit 08ef2a82115690d6e229615872ac1731af732497 Issue introduced in 5.3 with commit 01aa26c672c0eb771de4aaa2a8ccf6055778887b and fixed in 7.1.10 with commit fc59e9482117ebdccd6dc7fa8082f8b980fd021e Issue introduced in 5.3 with commit 01aa26c672c0eb771de4aaa2a8ccf6055778887b and fixed in 7.2 with commit 565bef268d75bf7df665bce6923a88cd0eb74592 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-80551 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/s390/cio/vfio_ccw_cp.c drivers/s390/cio/vfio_ccw_cp.h Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/0d46c2565f173bcddcdcaf44a4f69789a20535e2 https://git.kernel.org/stable/c/08ef2a82115690d6e229615872ac1731af732497 https://git.kernel.org/stable/c/fc59e9482117ebdccd6dc7fa8082f8b980fd021e https://git.kernel.org/stable/c/565bef268d75bf7df665bce6923a88cd0eb74592