CVE-2026-43149

net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()

The priv->rx_buffer and priv->tx_buffer are alloc'd together as contiguous buffers in uhdlc_init() but freed as two buffers in uhdlc_memclean().

Change the cleanup to only call dma_free_coherent() once on the whole buffer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c19b6d246a35627c3a69b2fa6bdece212b48214b to before 6496fb830cbb741d831225cc4e7e5601c6e42970Affected c19b6d246a35627c3a69b2fa6bdece212b48214b to before ba8d8429e5d6c36f9a654d2b96b9e043c43d92b4Affected c19b6d246a35627c3a69b2fa6bdece212b48214b to before 011ae5dd84dc9f05eb9b8e1adff44252ac776e7bAffected c19b6d246a35627c3a69b2fa6bdece212b48214b to before 0f85a9655445e67bb0238cfc983d7c383b54938eAffected c19b6d246a35627c3a69b2fa6bdece212b48214b to before 84b932bc9899d43e5829e6cf088b72d73a922b2bAffected c19b6d246a35627c3a69b2fa6bdece212b48214b to before d8a522085d09b30aba1016daf1dddac37c0f0285Affected c19b6d246a35627c3a69b2fa6bdece212b48214b to before d68994e37ac3b285692559776e0279a88a3b5f8dAffected c19b6d246a35627c3a69b2fa6bdece212b48214b to before 36bd7d5deef936c4e1e3cd341598140e5c14c1d3Affected
LinuxLinux	4.8Affected before 4.8Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

c19b6d246a35627c3a69b2fa6bdece212b48214b to before 6496fb830cbb741d831225cc4e7e5601c6e42970Affected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before ba8d8429e5d6c36f9a654d2b96b9e043c43d92b4Affected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before 011ae5dd84dc9f05eb9b8e1adff44252ac776e7bAffected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before 0f85a9655445e67bb0238cfc983d7c383b54938eAffected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before 84b932bc9899d43e5829e6cf088b72d73a922b2bAffected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before d8a522085d09b30aba1016daf1dddac37c0f0285Affected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before d68994e37ac3b285692559776e0279a88a3b5f8dAffected
c19b6d246a35627c3a69b2fa6bdece212b48214b to before 36bd7d5deef936c4e1e3cd341598140e5c14c1d3Affected

LinuxLinux

4.8Affected
before 4.8Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.