CVE-2026-80748
Received Received - Intake

Memory Corruption in Linux Kernel MMC Driver

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80748
EUVD
EUVD-2026-70352

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
loongson linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's MMC (MultiMediaCard) driver for Loongson2 systems. It involves incorrect handling of scatterlist entries in data reorder functions. The code uses an array indexing approach on a pointer already provided by the for_each_sg() macro, leading to access of wrong or out-of-bounds scatterlist entries.

Detection Guidance

This vulnerability is specific to the Linux kernel's MMC driver for Loongson2 hardware. Detection requires checking the kernel version and the presence of affected code. Use uname -a to check your kernel version and grep for the affected functions in the kernel source or compiled modules.

Impact Analysis

This vulnerability could cause memory corruption or crashes in systems using Loongson2 MMC devices. It may lead to data corruption, denial of service, or potential privilege escalation if exploited. Systems relying on MMC storage could experience instability or data loss.

Mitigation Strategies

Apply the latest kernel update from your distribution to patch the vulnerability. If no update is available, avoid using MMC devices on Loongson2 hardware until a fix is applied. Monitor vendor advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80748. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart