CVE-2026-43283

net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle

State: Published
Severity: 8.8 High
Published: May 6, 2026
Updated: Aug 5, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle

dma_free_coherent() in error path takes priv->rx_buf.alloc_len as the dma handle. This would lead to improper unmapping of the buffer.

Change the dma handle to priv->rx_buf.alloc_phys.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6af55ff52b02d492d45db88df3e461fa51a6f753 to before 0f589ee54fd6d76d3f75e745f7f12c64cbd749e5Affected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before accd0599bc8e73b962247c6c6c70ca7aa1f8e8d0Affected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before 8320727be7ff704e07c87624efc2a4a75f54b3ceAffected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1e300c33ef3cc544c2b9c693778fe9490cfe9184Affected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1b1371cd4032ae859838ebc74215f569987bb197Affected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1b1d3c5d58a80a19d017a409aa2308162bab5bbfAffected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before 7e54ff938bebb173822b4c38b33fc164c1cabf92Affected 6af55ff52b02d492d45db88df3e461fa51a6f753 to before ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2Affected
LinuxLinux	3.15Affected before 3.15Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

6af55ff52b02d492d45db88df3e461fa51a6f753 to before 0f589ee54fd6d76d3f75e745f7f12c64cbd749e5Affected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before accd0599bc8e73b962247c6c6c70ca7aa1f8e8d0Affected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before 8320727be7ff704e07c87624efc2a4a75f54b3ceAffected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1e300c33ef3cc544c2b9c693778fe9490cfe9184Affected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1b1371cd4032ae859838ebc74215f569987bb197Affected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before 1b1d3c5d58a80a19d017a409aa2308162bab5bbfAffected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before 7e54ff938bebb173822b4c38b33fc164c1cabf92Affected
6af55ff52b02d492d45db88df3e461fa51a6f753 to before ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2Affected

LinuxLinux

3.15Affected
before 3.15Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.