SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80645

HIGH · CVSS 8.1 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the rapidio/tsi721 component, where improper handling of a list iterator can lead to a bad memory dereference if the desired item is not found. This flaw could potentially allow for exploitation, leading to system instability or crashes. Organizations utilizing Linux systems that rely on the rapidio framework should prioritize addressing this vulnerability to mitigate risks associated with memory management errors.

CVE
CVE-2026-80645
Severity
HIGH
CVSS
8.1
EPSS
0.26%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a list_for_each() loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid memory. This code uses the "found" variable to determine if we have found the doorbell we are looking for or not. However, the problem that the "found" variable needs to be set to false at the start of each iteration, otherwise after the first correct doorbell, then everything is marked as found. Reset the "found" to false at the start of the iteration and move the variable inside the loop.