CVE-2026-80684
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
- Published Aug 28, 2026
- CVSS 9.3 critical
- 0.2% chance of exploitation in the next 30 days (EPSS)
- A fix is available