Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-80684

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < 96099486b63985801c9c6ef22505e9aa635b2d20affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < 0a95abe964400771ad82b027d7b84a0d183cd0dbaffected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < df947d85e164a50a29d43a96e814f69ab1d0f7edaffected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < e137d082325bbcae780087b57501d38585e625d9affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < d1a103dc9016c25e7423ce5841a5cc2df76d59f3affected
  • 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to < 8bf09b9b7d3232806df95f409581f8a9fd99a3faaffected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.151 to ≤ 6.6.*unaffected
  • 6.12.103 to ≤ 6.12.*unaffected
  • 6.18.44 to ≤ 6.18.*unaffected
  • 7.1.8 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References