CVE-2026-80921: linux
Vulnerability summary
CVE-2026-80921 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 5 · Related 1Timeline
- 09-09-2026PublishedVulnerability first disclosed.
- 19-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.13%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.13% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu168 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.187-1 | < 6.12.111-1 | < 7.1.13-1
- linux-6.12< 6.12.111-1~deb12u1
Linux1 product
- linux≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < d110b3297f11ef227098b8a82ade2d5f123b7d2f | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 59d51550b5cb916bda037673a721a404b3b47a0d | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < f6079dca67eccb5eabef9f72437948c66dc5131f | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 087c19cc60a8caa1a08e1e434c8be2caf6c27733 | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 7d23489f51109e3ebba5b5db8c5f0185af7b7fdf | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 935eeba276012916c76243e5cbb843efd8fdb75d | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < d4bcd2df6d0d2af916b4fe1a533958778ea7c45b | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6 | ≥ 6b79de4b056e5a2febc0c61233d8f0ad7868e49c, < 34d5b5b646c91cfb9338d7a12c955a70ffb8c66b | 4.20
3 vendors · 171 products
