CVE-2026-80684
Published Aug 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airq_iv_create() can return NULL on failure, but the return value was never checked. If it fails, zdev->aibv will be NULL and fail when dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the previously allocated AISB bit and zdev->aisb on failure.
Is your site exposed to CVE-2026-80684?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0017
Probability of exploitation
0.07%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/0a95abe964400771ad82b027d7b84a0d183cd0db
https://git.kernel.org/stable/c/8bf09b9b7d3232806df95f409581f8a9fd99a3fa
https://git.kernel.org/stable/c/96099486b63985801c9c6ef22505e9aa635b2d20
https://git.kernel.org/stable/c/d1a103dc9016c25e7423ce5841a5cc2df76d59f3
https://git.kernel.org/stable/c/df947d85e164a50a29d43a96e814f69ab1d0f7ed
https://git.kernel.org/stable/c/e137d082325bbcae780087b57501d38585e625d9
Frequently Asked Questions
What is CVE-2026-80684? +
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Fix NULL dereference on AIBV allocation failure
The airq_iv_create() can return NULL on failure, but the return value was
never checked. If it fails, zdev->aibv will be NULL and fail when
dereferenced in kvm_zpci_set_airq(). Add a NULL check and free the
previously allocated AISB bit and zdev->aisb on failure.
How do I check if I'm vulnerable to CVE-2026-80684? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.