---
id: CVE-2026-80552
title: 's390/vfio_ccw: Ensure index for read/write regions are within range'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Ensure index for read/write regions are within range

  The introduction of the capability chain rightly clamped the
  region indexes to the range of the cap…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    d3b1e38404b22df5a1f93019f2bb656feaad5ae3
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    79ea5e0c4c8a9842ae85f45062d947b3297dfc07
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    d597fa1273802941c7801202135976fecc29672b
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    649badf3a2fd8929e40198603a2cb21b74c21700
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    9f5f9a78fedc45bc29d6a0a64e3a3472361afae5
  - Linux 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T19:17:15.526707Z'
published: '2026-08-26'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:26:26.482Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80552'
references:
  - url: 'https://git.kernel.org/stable/c/3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99'
  - url: 'https://git.kernel.org/stable/c/d3b1e38404b22df5a1f93019f2bb656feaad5ae3'
  - url: 'https://git.kernel.org/stable/c/79ea5e0c4c8a9842ae85f45062d947b3297dfc07'
  - url: 'https://git.kernel.org/stable/c/d597fa1273802941c7801202135976fecc29672b'
  - url: 'https://git.kernel.org/stable/c/649badf3a2fd8929e40198603a2cb21b74c21700'
  - url: 'https://git.kernel.org/stable/c/988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf'
  - url: 'https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.06653
ingestedAt: '2026-10-16T19:46:24.317Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Ensure index for read/write regions are within range

The introduction of the capability chain rightly clamped the
region indexes to the range of the capabilities itself, but
neglected to do so for the existing read/write regions which
should also be enforced.

## Affected

- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < d3b1e38404b22df5a1f93019f2bb656feaad5ae3`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 79ea5e0c4c8a9842ae85f45062d947b3297dfc07`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < d597fa1273802941c7801202135976fecc29672b`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 649badf3a2fd8929e40198603a2cb21b74c21700`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf`
- `Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 9f5f9a78fedc45bc29d6a0a64e3a3472361afae5`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.