PT-2026-89091

CVE-2026-80921

·

Published

2026-09-09

·

Updated

2026-11-12

Description by

CVSS 3.1
8.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the KVM s390 vsie component where crypto access bits are shadowed from a format0 apcb (crycb 0 or 1). Specifically, bits 64 through 255 remain unchanged from the values in the vsie page within the crycb and apcb. This allows a nested guest to potentially access a device that is no longer available.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
ALSA-2026:75746
ALSA-2026:75747
ALSA-2026:76738
AZL-99950
OESA-2026-4357
OPENSUSE-SU-2026:11773-1
USN-8959-1
USN-8960-1
USN-8961-1
USN-8962-1
USN-8963-1
USN-9019-1
USN-9020-1
USN-9021-1
USN-9022-1
USN-9023-1
USN-9024-1
USN-9025-1
USN-9026-1
USN-9029-1
USN-9039-1
USN-9040-1
USN-9066-1
Found an issue in the description? Have something to add? Feel free to write us 👾