CVE-2026-80891KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a single page boundary, then reject the request as we cannot safely pin the guest AIBV. Similarly reject the request if the AISB address is not 8-byte aligned as the architecture requires doubleword alignment for the summary bit address. Since the AISBO can address up to 64 bits, the size of the AISB can only be 8 bytes for the function. This also ensures the AISB doesn't exceed a single page boundary.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc builds before 3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48; from 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before f00ef8efd41440129ccd88f4a1ebebf8d61d297f; from 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before 15df7700dd99f8a37f5c6ed2dcf1e33009cdba47; from 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before b878ba7e28144c9a857bc847d31f3c45413450ac; from 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528; from 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before 868d32ac72cba21c5c6d8a66a814b7c25a3a5c01 | CNA record |
References
- https://git.kernel.org/stable/c/3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48
- https://git.kernel.org/stable/c/f00ef8efd41440129ccd88f4a1ebebf8d61d297f
- https://git.kernel.org/stable/c/15df7700dd99f8a37f5c6ed2dcf1e33009cdba47
- https://git.kernel.org/stable/c/b878ba7e28144c9a857bc847d31f3c45413450ac
- https://git.kernel.org/stable/c/fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528
- https://git.kernel.org/stable/c/868d32ac72cba21c5c6d8a66a814b7c25a3a5c01
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.