Description
In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Move cp cleanup out of not operational

The fsm_notoper() routine is called when the device has been
lost, and is (by definition) no longer operational. Since this
can happen asynchronously from the normal behavior of the
driver, the cleanup may happen when holding other locks
in the calling sequence (notably, the cio subchannel lock).

Push the cleanup of the private->cp resources to a workqueue,
where it can be done out from under that lock sequence and
a future patch can safely manage the locking requirements.
Published: 2026-08-26
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel s390/vfio_ccw driver previously performed cleanup of private CP resources while holding critical subchannel locks during an asynchronous device loss event. This could lead to a deadlock or crash, resulting in a denial of service or instability of the system. The patch moves the cleanup to a delayed workqueue, eliminating the race condition.

Affected Systems

The vulnerability applies to the s390 architecture in the Linux kernel, affecting the vfio_ccw driver. Any installation of a kernel revision that has not yet incorporated the patch from the cited commits is vulnerable. The vendor is the Linux kernel maintainers, and the product is the Linux kernel for s390.

Risk and Exploitability

No CVSS or EPSS score is disclosed. The bug is not listed in the CISA KEV catalog. Exploitation would require local or privileged access to force the target device to become lost or to trigger the cleanup path, which could lead to a system halt or service interruption. The patch removes the race condition, and after update the risk is mitigated.

Generated by OpenCVE AI on August 26, 2026 at 16:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a kernel release that includes the vfio_ccw cleanup patch from the referenced commits.
  • If an update is not feasible, backport the commits that move the cleanup to a workqueue or manually apply the code changes.
  • After applying the fix, reboot and monitor system stability to ensure the changes take effect.

Generated by OpenCVE AI on August 26, 2026 at 16:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 26 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-754

Wed, 26 Aug 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper() routine is called when the device has been lost, and is (by definition) no longer operational. Since this can happen asynchronously from the normal behavior of the driver, the cleanup may happen when holding other locks in the calling sequence (notably, the cio subchannel lock). Push the cleanup of the private->cp resources to a workqueue, where it can be done out from under that lock sequence and a future patch can safely manage the locking requirements.
Title s390/vfio_ccw: Move cp cleanup out of not operational
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-26T14:37:19.353Z

Reserved: 2026-08-26T14:34:25.766Z

Link: CVE-2026-80549

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T15:17:09.323

Modified: 2026-08-26T15:17:09.323

Link: CVE-2026-80549

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T17:15:04Z

Weaknesses
  • CWE-754

    Improper Check for Unusual or Exceptional Conditions