VULNERABILITY INTELLIGENCE
CVE-2026-80684
CVSS score9.3 CRITICAL
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-10-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.