s390/vfio_ccw: Ensure index for read/write regions are within range (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.
References
- https://git.kernel.org/stable/c/3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99
- https://git.kernel.org/stable/c/d3b1e38404b22df5a1f93019f2bb656feaad5ae3
- https://git.kernel.org/stable/c/79ea5e0c4c8a9842ae85f45062d947b3297dfc07
- https://git.kernel.org/stable/c/d597fa1273802941c7801202135976fecc29672b
- https://git.kernel.org/stable/c/649badf3a2fd8929e40198603a2cb21b74c21700
- https://git.kernel.org/stable/c/988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf
- https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-66467
- GCVE · GCVE-0-2026-80552
CERT-FR advisories
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99 ; affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < d3b1e38404b22df5a1f93019f2bb656feaad5ae3 ; affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 79ea5e0c4c8a9842ae85f45062d947b3297dfc07 ; affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < d597fa1273802941c7801202135976fecc29672b ; affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 649badf3a2fd8929e40198603a2cb21b74c21700 ; affected db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 < 988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf |
| Linux · Linux | affected 5.2 ; unaffected 0 < 5.2 ; unaffected 5.15.218 ≤ 5.15.* ; unaffected 6.1.184 ≤ 6.1.* ; unaffected 6.6.153 ≤ 6.6.* ; unaffected 6.12.105 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |