Vulnerability in Linux
CVE-2026-80684
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
EPSS: 0.002 (6.8th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 6.0