rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-80645
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-08-28 08:16:49 UTC
Updated2026-08-29 07:16:47 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a list_for_each() loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid memory. This code uses the "found" variable to determine if we have found the doorbell we are looking for or not. However, the problem that the "found" variable needs to be set to false at the start of each iteration, otherwise after the first correct doorbell, then everything is marked as found. Reset the "found" to false at the start of the iteration and move the variable inside the loop.

Risk And Classification

Primary CVSS: v3.1 8.1 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.001760000 probability, percentile 0.072370000 (date 2026-08-28)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary8.1HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
3.1CNADECLARED8.1HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 9e775c3199903d7c09a52530042b1198eab705bd git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 81c06ef66c3ab6eeaa72eb790c90ae043cdb3d43 git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 13092966ba5d8fb214a4efeddc87f9ed0fd2f945 git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 acd54f42abbbd806464468838dbc04efd203d2be git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 3b5c66e922aa6a3331915a14520848a5b3beccc7 git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 070f356ea4f419e4e85e4089381f4477f41d969e git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 dc28a14f3e4546b2b06098d24177942540581a5f git Not specified
CNA Linux Linux affected 48618fb4e522d9d02e217ac05f52749545c1af20 fc15e3a30ddd950f009c76765331783b9af94a87 git Not specified
CNA Linux Linux affected 3.2 Not specified
CNA Linux Linux unaffected 3.2 semver Not specified
CNA Linux Linux unaffected 5.10.261 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.212 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.178 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.145 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.97 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.40 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.5 7.1.* semver Not specified
CNA Linux Linux unaffected 7.2 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/81c06ef66c3ab6eeaa72eb790c90ae043cdb3d43 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/3b5c66e922aa6a3331915a14520848a5b3beccc7 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/070f356ea4f419e4e85e4089381f4477f41d969e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/fc15e3a30ddd950f009c76765331783b9af94a87 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/acd54f42abbbd806464468838dbc04efd203d2be 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/13092966ba5d8fb214a4efeddc87f9ed0fd2f945 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/dc28a14f3e4546b2b06098d24177942540581a5f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/9e775c3199903d7c09a52530042b1198eab705bd 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report