CVE-2026-80748
In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder functions In ls2k0500_mmc_reorder_cmd_data() and ls2k2000_mmc_reorder_cmd_data(), the for_each_sg() macro already iterates over the scatterlist entries, with 'sg' pointing to the current entry. However, the code incorrectly uses '&sg[i]' and 'sg_dma_len(&sg[i])' inside the loop, which treats 'sg' as an array base and indexes it again, leading to access of wrong sg entries (or out-of-bounds if the list is not an array).
Affected versions
Linux kernel versions
6.17
and later are affected. Fixed in
6.18.46,
7.1.10,
7.2
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-80748?
CVE-2026-80748 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.17 onward and has been patched in 6.18.46, 7.1.10 and 7.2. CVE-2026-80748 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-80748?
Yes. CVE-2026-80748 has been patched. Fixed versions include 6.18.46, 7.1.10 and 7.2. If you are running Linux kernel 6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-80748 actively exploited?
No. CVE-2026-80748 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.