CVE-2024-41026

A flaw was found in the davinci_mmc driver in the Linux kernel, which lacks validation for the size of transmitted data, leading to potential kernel panics if the data size exceeded the scatter-gather list (sg_miter) length. This issue was addressed by adding a check to limit the transmitted data to the sgm->length, preventing buffer overflows and enhancing system stability.

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.