CVE-2026-43461— spi: amlogic: spifc-a4: Fix DMA mapping error handling
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-43461
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
spi: amlogic: spifc-a4: Fix DMA mapping error handling
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: Fix DMA mapping error handling Fix three bugs in aml_sfc_dma_buffer_setup() error paths: 1. Unnecessary goto: When the first DMA mapping (sfc->daddr) fails, nothing needs cleanup. Use direct return instead of goto. 2. Double-unmap bug: When info DMA mapping failed, the code would unmap sfc->daddr inline, then fall through to out_map_data which would unmap it again, causing a double-unmap. 3. Wrong unmap size: The out_map_info label used datalen instead of infolen when unmapping sfc->iaddr, which could lead to incorrect DMA sync behavior.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-43461
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-43461
Please Login to view more intelligence information
Same Patch Batch · Linux · 2026-05-08 · 199 CVEs total
| CVE-2026-43337 | drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() | |
| CVE-2026-43349 | f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer | |
| CVE-2026-43348 | mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER | |
| CVE-2026-43347 | arm64: dts: qcom: monaco: Reserve full Gunyah metadata region | |
| CVE-2026-43346 | ice: ptp: don't WARN when controlling PF is unavailable | |
| CVE-2026-43345 | net: ipa: fix event ring index not programmed for IPA v5.0+ | |
| CVE-2026-43344 | perf/x86/intel/uncore: Fix die ID init and look up bugs | |
| CVE-2026-43343 | usb: gadget: f_subset: Fix unbalanced refcnt in geth_free | |
| CVE-2026-43342 | usb: gadget: f_rndis: Protect RNDIS options with mutex | |
| CVE-2026-43340 | comedi: Reinit dev->spinlock between attachments to low-level drivers | |
| CVE-2026-43341 | net/ipv6: ioam6: prevent schema length wraparound in trace fill | |
| CVE-2026-43339 | ipv6: prevent possible UaF in addrconf_permanent_addr() | |
| CVE-2026-43338 | btrfs: reserve enough transaction items for qgroup ioctls | |
| CVE-2026-43331 | x86/kexec: Disable KCOV instrumentation after load_segments() | |
| CVE-2026-43325 | wifi: iwlwifi: mvm: don't send a 6E related command when not supported | |
| CVE-2026-43327 | USB: dummy-hcd: Fix locking/synchronization error | |
| CVE-2026-43329 | netfilter: flowtable: strictly check for maximum number of actions | |
| CVE-2026-43328 | cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path | |
| CVE-2026-43330 | crypto: caam - fix overflow on long hmac keys | |
| CVE-2026-43334 | Bluetooth: SMP: force responder MITM requirements before building the pairing response |
Showing top 20 of 199 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling - CVE-2026-43471
scsi: ufs: core: Fix possible NULL pointer dereference in uf
Same vendor: Linux
- CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling - CVE-2026-43471
scsi: ufs: core: Fix possible NULL pointer dereference in uf
V. Comments for CVE-2026-43461
No comments yet