CVE-2026-43461

Description

A flaw was found in the Linux kernel, specifically within the spi: amlogic: spifc-a4 module. This vulnerability involves errors in the handling of Direct Memory Access (DMA) mapping within the aml_sfc_dma_buffer_setup() function. These errors include a double-unmap bug and an incorrect unmap size, which can lead to improper memory synchronization. An attacker could potentially exploit these memory management issues to cause a system crash, leading to a Denial of Service (DoS).

Understanding the Weakness (CWE)

Integrity,Availability,Confidentiality

Technical Impact: Modify Memory; DoS: Crash, Exit, or Restart; Execute Unauthorized Code or Commands

This weakness may result in the corruption of memory, and perhaps instructions, possibly leading to a crash. If the corrupted memory can be effectively controlled, it may be possible to execute arbitrary code.

Frequently Asked Questions

Want to get errata notifications? Sign up here.