Riskcovery

CVE-2026-43461

spi: amlogic: spifc-a4: Fix DMA mapping error handling

State
Published
Severity
7.8 High
Published
May 8, 2026
Updated
Aug 5, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: amlogic: spifc-a4: Fix DMA mapping error handling

Fix three bugs in aml_sfc_dma_buffer_setup() error paths: 1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails, nothing needs cleanup. Use direct return instead of goto. 2. Double-unmap bug: When info DMA mapping failed, the code would unmap sfc->daddr inline, then fall through to out_map_data which would unmap it again, causing a double-unmap. 3. Wrong unmap size: The out_map_info label used datalen instead of infolen when unmapping sfc->iaddr, which could lead to incorrect DMA sync behavior.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9 to before 0a83d6c9e149a176340190fa9cbadf2266db4c9aAffected
  • 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9 to before c0b88f1176074f80140ed77fce909f254b7180abAffected
  • 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9 to before b20b437666e1cb26a7c499d1664e8f2a0ac67000Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.