---
id: CVE-2026-80552
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Ensure index for read/write regions are within range

  The introduction of the capability chain rightly clamped the
  region indexes to the range of the cap…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Ensure index for read/write regions are within range

  The introduction of the capability chain rightly clamped the
  region indexes to the range of the cap…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    d3b1e38404b22df5a1f93019f2bb656feaad5ae3
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    79ea5e0c4c8a9842ae85f45062d947b3297dfc07
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    d597fa1273802941c7801202135976fecc29672b
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    649badf3a2fd8929e40198603a2cb21b74c21700
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf
  - >-
    Linux >= db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 <
    9f5f9a78fedc45bc29d6a0a64e3a3472361afae5
  - Linux 5.2
published: '2026-08-26'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T20:17:59.527'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-80552'
references:
  - url: 'https://git.kernel.org/stable/c/3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/649badf3a2fd8929e40198603a2cb21b74c21700'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/79ea5e0c4c8a9842ae85f45062d947b3297dfc07'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3b1e38404b22df5a1f93019f2bb656feaad5ae3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d597fa1273802941c7801202135976fecc29672b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00176
epssPercentile: 0.07049
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T19:17:15.526707Z'
ingestedAt: '2026-10-16T19:46:24.317Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Ensure index for read/write regions are within range

The introduction of the capability chain rightly clamped the
region indexes to the range of the capabilities itself, but
neglected to do so for the existing read/write regions which
should also be enforced.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.