7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
spi: amlogic: spifc-a4: Fix DMA mapping error handling
Fix three bugs in aml_sfc_dma_buffer_setup() error paths:
1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails,
nothing needs cleanup. Use direct return instead of goto.
2. Double-unmap bug: When info DMA mapping failed, the code would
unmap sfc->daddr inline, then fall through to out_map_data which
would unmap it again, causing a double-unmap.
3. Wrong unmap size: The out_map_info label used datalen instead of
infolen when unmapping sfc->iaddr, which could lead to incorrect
DMA sync behavior.
spi: amlogic: spifc-a4: Fix DMA mapping error handling
Fix three bugs in aml_sfc_dma_buffer_setup() error paths:
1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails,
nothing needs cleanup. Use direct return instead of goto.
2. Double-unmap bug: When info DMA mapping failed, the code would
unmap sfc->daddr inline, then fall through to out_map_data which
would unmap it again, causing a double-unmap.
3. Wrong unmap size: The out_map_info label used datalen instead of
infolen when unmapping sfc->iaddr, which could lead to incorrect
DMA sync behavior.
Basic Information
ID
CVE-2026-43461
Source
Linux
Published
May 8, 2026 at 14:22
Modified
May 11, 2026 at 06:34
Affected Product
Vendor
Linux
Product
Linux
Version
4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Affected Versions
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 6.18
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9
Linux Linux 6.18