{"apiVersion":"1.0","identifier":"CVE-2026-80555","description":"In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails The routine cp_free() is called to unpin/free any memory once an I/O is completed successfully, or if cp_prefetch() fails. But if cp_init() fails, and cp->initialized is not enabled, the same routine cannot be used to free all the memory. An attempt to address this exists in ccwchain_handle_ccw(), where a single call to ccwchain_free() is made for the currently-processed CCW segment. But this will leak other segments (created as a result of a Transfer in Channel) that had been allocated as part of the same channel program. Address this by performing the cleanup outside of the recursive ccwchain_handle_ccw()/ccwchain_loop_tic() logic.","publishedAt":"2026-08-26T15:17:10","lastModifiedAt":"2026-08-27T13:18:40","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80555","cvssScore":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","epssProbability":0.0014,"riskScore":0.72,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-80555","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-80555","en":"https://www.redsauce.net/en/cves/CVE-2026-80555","fr":"https://www.redsauce.net/fr/cves/CVE-2026-80555","pt":"https://www.redsauce.net/pt/cves/CVE-2026-80555","de":"https://www.redsauce.net/de/cves/CVE-2026-80555","sk":"https://www.redsauce.net/sk/cves/CVE-2026-80555","el":"https://www.redsauce.net/el/cves/CVE-2026-80555"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-80555"}}