Kernel Vulnerability Affecting Amlogic SPI Driver in Linux
CVE-2026-43461

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
8 May 2026

What is CVE-2026-43461?

This vulnerability in the Amlogic SPI driver within the Linux kernel involves flaws in DMA mapping error handling. Key issues include improper cleanup on DMA mapping failure, leading to resource leaks; a potential double-unmap situation that could occur when dealing with failed DMA mappings; and incorrect unmap size management which may disrupt DMA synchronization processes. These issues underscore the importance of careful handling of memory resources in driver development to prevent unintended consequences and system instability.

Affected Version(s)

Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9 < 0a83d6c9e149a176340190fa9cbadf2266db4c9a

Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9

Linux 4670db6f32e9379f5ab6c9bb2a6787cd9b9230a9

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.