CVE-2026-43461

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: Fix DMA mapping error handling Fix three bugs in aml_sfc_dma_buffer_setup() error paths: 1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails, nothing needs cleanup. Use direct return instead of goto. 2. Double-unmap bug: When info DMA mapping failed, the code would unmap sfc->daddr inline, then fall through to out_map_data which would unmap it again, causing a double-unmap. 3. Wrong unmap size: The out_map_info label used datalen instead of infolen when unmapping sfc->iaddr, which could lead to incorrect DMA sync behavior.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

History

20 May 2026, 18:41

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0a83d6c9e149a176340190fa9cbadf2266db4c9a - () https://git.kernel.org/stable/c/0a83d6c9e149a176340190fa9cbadf2266db4c9a - Patch
References () https://git.kernel.org/stable/c/b20b437666e1cb26a7c499d1664e8f2a0ac67000 - () https://git.kernel.org/stable/c/b20b437666e1cb26a7c499d1664e8f2a0ac67000 - Patch
References () https://git.kernel.org/stable/c/c0b88f1176074f80140ed77fce909f254b7180ab - () https://git.kernel.org/stable/c/c0b88f1176074f80140ed77fce909f254b7180ab - Patch
First Time Linux linux Kernel
Linux

11 May 2026, 08:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

08 May 2026, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-08 15:16

Updated : 2026-05-20 18:41


NVD link : CVE-2026-43461

Mitre link : CVE-2026-43461

CVE.ORG link : CVE-2026-43461


JSON object : View

Products Affected

linux

  • linux_kernel