CVE-2026-80831

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs_dcp_aes_block_crypt() uses sg_dma_len() without mapping the source scatterlist with dma_map_sg() first. Therefore, sg_dma_len() is invalid and could return zero or a stale DMA length, causing encryption and decryption to process the wrong number of bytes when CONFIG_NEED_SG_DMA_LENGTH=y. Use the original scatterlist length instead.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 4, 2026
First seenSep 4, 2026

How to fix

Update
  • Linux Linuxfd0f211b27a6ec2ebd8c315683401b43adcc5511, 04201dcc88b26eac52f736e39727fc5c420b7257, e72a795df521cb65b7c4705cc11078cdacfaa2f4, 1537bd55b4f842565068c54b47cd2ae1777d5f8f, da14fae5203b72ca71ccfa9af8de9249e40d533a, 182f16a20d329a1c818d51dad57d9bf43d356c7c, 0e9edb108a63bbbef952dfcbc597e34ed9c1fb74, 6ef9a4afb52cb102ab038cd42352c142d8505d09, c5bcb084a9871e5b62afb5f48b60adfa13b5d9f8 or later

Affected products

ProductAffected versionsFixed in
Linux Linux15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < fd0f211b27a6ec2ebd8c315683401b43adcc5511, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < 04201dcc88b26eac52f736e39727fc5c420b7257, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < e72a795df521cb65b7c4705cc11078cdacfaa2f4, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < 1537bd55b4f842565068c54b47cd2ae1777d5f8f, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < da14fae5203b72ca71ccfa9af8de9249e40d533a, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < 182f16a20d329a1c818d51dad57d9bf43d356c7c, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < 0e9edb108a63bbbef952dfcbc597e34ed9c1fb74, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < 6ef9a4afb52cb102ab038cd42352c142d8505d09, 15b59e7c3733f90ff1f7dd66ad77ae1c90bcdff5 ≤ v < c5bcb084a9871e5b62afb5f48b60adfa13b5d9f8, 3.14fd0f211b27a6ec2ebd8c315683401b43adcc5511, 04201dcc88b26eac52f736e39727fc5c420b7257, e72a795df521cb65b7c4705cc11078cdacfaa2f4, 1537bd55b4f842565068c54b47cd2ae1777d5f8f, da14fae5203b72ca71ccfa9af8de9249e40d533a, 182f16a20d329a1c818d51dad57d9bf43d356c7c, 0e9edb108a63bbbef952dfcbc597e34ed9c1fb74, 6ef9a4afb52cb102ab038cd42352c142d8505d09, c5bcb084a9871e5b62afb5f48b60adfa13b5d9f8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80831 · Linux · Dark Radar