CVE-2026-80554: Linux 4.12

CVE-2026-80554. CVSS 3.1 base score 9.3 (CRITICAL, Source advisory). EPSS 0.00196 (percentile 0.08633), scored 15-Oct-2026.

Affected technology

Linux · 0a19e61e6d4c6192077ead760ba0a2d350987d4c to before 15fb4559a7fdf0b8725e433a71cfd03a1313a48b, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to before a1625f66eaa1200068a0e2c05bc90e65182fc4e3, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to before 06f4d6e5a8af6c2072e8cd39dbc512c683ca7fb2, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to before 4ee94790490ae8dcc97df8597f07836c8a81bbcf, 0a19e61e6d4c6192077ead760ba0a2d350987d4c to before 5405c90d6a47b3014e74ee0618a162449abbbc93
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/s390/cio/vfio_ccw_cp.c, drivers/s390/cio/vfio_ccw_cp.h

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 20:21 UTC

CCR priority: 37.2 /100 (P4)
CVSS 3.1: 9.3 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · Source advisory
EPSS: 0.00196 · percentile 0.08633 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-80554.html