AZL-99402
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99402.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-99402
- Upstream
- Published
- 2026-09-04T16:18:11Z
- Modified
- 2026-09-23T14:17:43Z
- Summary
- CVE-2026-80831 affecting package kernel 6.6.152.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
crypto: mxs-dcp - fix source scatterlist length access
mxs_dcp_aes_block_crypt() uses sg_dma_len() without mapping the source scatterlist with dma_map_sg() first. Therefore, sg_dma_len() is invalid and could return zero or a stale DMA length, causing encryption and decryption to process the wrong number of bytes when CONFIG_NEED_SG_DMA_LENGTH=y.
Use the original scatterlist length instead.
- References