SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-80748

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of scatter-gather lists in the Loongson2 MMC driver, where incorrect indexing in data reorder functions can lead to accessing invalid memory entries. This flaw may result in data corruption or system instability, particularly in environments utilizing the Loongson2 architecture. System administrators and developers working with affected Linux kernel versions should prioritize applying the fix to mitigate potential risks.

CVE
CVE-2026-80748
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array).