CVE 7.8 HIGH

spi: amlogic: spifc-a4: Fix DMA mapping error handling_CVE-2026-43461

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: amlogic: spifc-a4: Fix DMA mapping error handling

Fix three bugs in aml_sfc_dma_buffer_setup() error paths:
1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails,
nothing needs cleanup. Use direct return instead of goto.
2. Double-unmap bug: When info DMA mapping failed, the code would
unmap sfc->daddr inline, then fall through to out_map_data which
would unmap it again, causing a double-unmap.
3. Wrong unmap size: The out_map_info label used datalen instead of
infolen when unmapping sfc->iaddr, which could lead to incorrect
DMA sync behavior.

Basic Information

ID CVE-2026-43461
Source Linux
Published May 8, 2026 at 14:22
Modified May 11, 2026 at 06:34

Affected Product

Vendor Linux
Product Linux
Version 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Affected Versions Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 6.18

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.