Access Vulnerability in Linux Kernel's Cryptography Module

CVE-2026-80831

What is CVE-2026-80831?

A vulnerability exists within the Linux Kernel's cryptographic module, specifically in the mxs_dcp_aes_block_crypt() function. This function improperly uses sg_dma_len() without first mapping the source scatterlist with dma_map_sg(). As a result, sg_dma_len() may yield zero or an outdated DMA length, which could potentially lead to encryption and decryption operations processing an incorrect quantity of bytes. This flaw highlights the need for careful handling of scatterlist lengths to ensure data integrity during cryptographic operations.

References