CVE-2026-80921 Linux Kernel KVM s390 - Broken Access Control

Linux kernel KVM s390 contains a broken access control vulnerability caused by stale crypto bits in vsie page allowing nested guests potential unauthorized device access, exploit requires nested guest environment.

CVSS base score 8.8 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Required
EPSS
0.13% chance of exploitation in 30 days
View the NVD record ↗