Riskcovery

CVE-2026-80748

mmc: loongson2: Fix sg iteration in data reorder functions

State
Published
Severity
7.8 High
Published
Sep 3, 2026
Updated
Sep 4, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: loongson2: Fix sg iteration in data reorder functions

In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array).

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2115772014bdac368317e997ed15016cf2792665 to before 8f7f7a6d5aed8f346a1c936fba02033c73a337dcAffected
  • 2115772014bdac368317e997ed15016cf2792665 to before db368164383c46f256ed8152a41ae9300e615028Affected
  • 2115772014bdac368317e997ed15016cf2792665 to before 00179ed9fbe07799676e2cb63c4e7f0e7cd80a5cAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.