# KVM: s390: pci: Validate AIBV and AISB before pinning guest pages

CVE record · `CVE-2026-80891`

- **Identifiers:** `CVE-2026-80891`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 4 Sept 2026
- **Updated:** 4 Sept 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48` (git)
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before f00ef8efd41440129ccd88f4a1ebebf8d61d297f` (git)
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 15df7700dd99f8a37f5c6ed2dcf1e33009cdba47` (git)
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before b878ba7e28144c9a857bc847d31f3c45413450ac` (git)
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528` (git)
  - affected: `3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc to before 868d32ac72cba21c5c6d8a66a814b7c25a3a5c01` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.0`
  - unaffected: `before 6.0` (semver)
  - unaffected: `6.1.183 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.151 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.103 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.44 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.8 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 11th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 4 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-80891](https://www.cve.org/CVERecord?id=CVE-2026-80891)
- [NVD: CVE-2026-80891](https://nvd.nist.gov/vuln/detail/CVE-2026-80891)

### References from the CNA

- <https://git.kernel.org/stable/c/3a1c64220ede4ac9ef9a3e76f008ff60a34f4c48>
- <https://git.kernel.org/stable/c/f00ef8efd41440129ccd88f4a1ebebf8d61d297f>
- <https://git.kernel.org/stable/c/15df7700dd99f8a37f5c6ed2dcf1e33009cdba47>
- <https://git.kernel.org/stable/c/b878ba7e28144c9a857bc847d31f3c45413450ac>
- <https://git.kernel.org/stable/c/fbfe683f8b1ae7e40b56bdd6daf5bd671bc3a528>
- <https://git.kernel.org/stable/c/868d32ac72cba21c5c6d8a66a814b7c25a3a5c01>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80891>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80891/>. Everything for agents: <https://agentprime.io/llms.txt>.