CVE-2026-80684 (CVSS 9.3)

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.

Is your site exposed to CVE-2026-80684?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.3

CRITICAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0020

Probability of exploitation

0.08%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/0a95abe964400771ad82b027d7b84a0d183cd0db https://git.kernel.org/stable/c/8bf09b9b7d3232806df95f409581f8a9fd99a3fa https://git.kernel.org/stable/c/96099486b63985801c9c6ef22505e9aa635b2d20 https://git.kernel.org/stable/c/d1a103dc9016c25e7423ce5841a5cc2df76d59f3 https://git.kernel.org/stable/c/df947d85e164a50a29d43a96e814f69ab1d0f7ed https://git.kernel.org/stable/c/e137d082325bbcae780087b57501d38585e625d9

Frequently Asked Questions

What is CVE-2026-80684? +

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure. It has a CVSS v3.1 base score of 9.3 (CRITICAL).

How severe is CVE-2026-80684? +

CVE-2026-80684 has a CVSS v3.1 score of 9.3 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately. The EPSS score is 0.0020, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-80684? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-80684