---
id: CVE-2026-80553
title: 's390/vfio_ccw: Cancel existing workqueues'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Cancel existing workqueues

  The initialization of the io_work and crw_work workqueues begs the
  question of whether they should be un-initialized. Add the…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    87d569cb35a541b31a184faf982540694d4c9a89
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    7492ca2d0c5d59add01e267be9f5a6eeb8076fd7
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    b94b28c1f0fae53b2f2d6180ae6442c9a1558f67
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    e868ea8be0bc88c6982f48ecf3259d98afd884ae
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    dc47a98abe6714577a25224534dbd356051097a3
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    b7ae0f7993867d009a4b554fc1d6d451c10580a0
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    77f5e888d2e607a0b3141fb95091ad6ef1cca9a2
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    79c60b2c61105368dcc8444eb45847e21734f7c4
  - Linux 4.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T19:17:19.506995Z'
published: '2026-08-26'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:26:26.626Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80553'
references:
  - url: 'https://git.kernel.org/stable/c/87d569cb35a541b31a184faf982540694d4c9a89'
  - url: 'https://git.kernel.org/stable/c/7492ca2d0c5d59add01e267be9f5a6eeb8076fd7'
  - url: 'https://git.kernel.org/stable/c/b94b28c1f0fae53b2f2d6180ae6442c9a1558f67'
  - url: 'https://git.kernel.org/stable/c/e868ea8be0bc88c6982f48ecf3259d98afd884ae'
  - url: 'https://git.kernel.org/stable/c/dc47a98abe6714577a25224534dbd356051097a3'
  - url: 'https://git.kernel.org/stable/c/b7ae0f7993867d009a4b554fc1d6d451c10580a0'
  - url: 'https://git.kernel.org/stable/c/77f5e888d2e607a0b3141fb95091ad6ef1cca9a2'
  - url: 'https://git.kernel.org/stable/c/79c60b2c61105368dcc8444eb45847e21734f7c4'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.06641
ingestedAt: '2026-10-16T19:46:24.318Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Cancel existing workqueues

The initialization of the io_work and crw_work workqueues begs the
question of whether they should be un-initialized. Add the corresponding
cleanup tags in _release_dev to ensure work isn't dispatched after
the private struct is free'd.

## Affected

- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < 87d569cb35a541b31a184faf982540694d4c9a89`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < 7492ca2d0c5d59add01e267be9f5a6eeb8076fd7`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < b94b28c1f0fae53b2f2d6180ae6442c9a1558f67`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < e868ea8be0bc88c6982f48ecf3259d98afd884ae`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < dc47a98abe6714577a25224534dbd356051097a3`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < b7ae0f7993867d009a4b554fc1d6d451c10580a0`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < 77f5e888d2e607a0b3141fb95091ad6ef1cca9a2`
- `Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 < 79c60b2c61105368dcc8444eb45847e21734f7c4`
- `Linux 4.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.