{
  "cveId": "CVE-2026-80552",
  "url": "https://patchblox.com/security/cve/CVE-2026-80552",
  "summary": "CVE-2026-80552 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-80552, released August 27, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "s390/vfio_ccw: Ensure index for read/write regions are within range",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  s390/vfio_ccw: Ensure index for read/write regions are within range  The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.",
  "published": "2026-08-26T15:17:09Z",
  "severity": "Important",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "epss": 0.00129,
  "epssPercentile": 0.02585,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80552",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.187-1",
      "fix": "DEBIAN-CVE-2026-80552",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80552",
      "released": "2026-08-27T00:27:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.105-1",
      "fix": "DEBIAN-CVE-2026-80552",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80552",
      "released": "2026-08-27T00:27:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.10-1",
      "fix": "DEBIAN-CVE-2026-80552",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80552",
      "released": "2026-08-27T00:27:02Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.107-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-80552",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80552",
      "released": "2026-08-27T00:27:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}