CVE-2026-80748
- Source
- https://cve.org/CVERecord?id=CVE-2026-80748
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80748.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80748
- Downstream
- Published
- 2026-09-03T08:26:29.532Z
- Modified
- 2026-09-05T03:48:34.404160747Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- mmc: loongson2: Fix sg iteration in data reorder functions
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mmc: loongson2: Fix sg iteration in data reorder functions
In ls2k0500mmcreordercmddata() and ls2k2000mmcreordercmddata(), the foreachsg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sgdmalen(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array).
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80748.json" }- References
-
- https://git.kernel.org/stable/c/00179ed9fbe07799676e2cb63c4e7f0e7cd80a5c
- https://git.kernel.org/stable/c/8f7f7a6d5aed8f346a1c936fba02033c73a337dc
- https://git.kernel.org/stable/c/db368164383c46f256ed8152a41ae9300e615028
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80748.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80748
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git