CVE-2026-80831EPSS p5.1%
CVE-2026-80831CVE-2026-80831
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: mxs-dcp - fix source scatterlist length access
mxs_dcp_aes_block_crypt() uses sg_dma_len() without mapping the source
scatterlist with dma_map_sg() first. Therefore, sg_dma_len() is invalid
and could return zero or a stale DMA length, causing encryption and
decryption to process the wrong number of bytes when
CONFIG_NEED_SG_DMA_LENGTH=y.
Use the original scatterlist length instead.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 5.1% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-04 |