CVE-2026-43283
highIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle dma_free_coherent() in error pa…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle dma_free_coherent() in error path takes priv->rx_buf.alloc_len as the dma handle. This would lead to improper unmapping of the buffer. Change the dma handle to priv->rx_buf.alloc_phys.
CVSS
8.8
8.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Timeline (UTC)
Published: 2026-05-06 12:16
Modified: 2026-11-11 23:10
NVD status: Analyzed
Last synced 3 hours ago
Verified against the source API 2026-11-11 23:13 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥3.15.1 <5.10.252, ≥5.11 <5.15.202, ≥5.16 <6.1.165, ≥6.2 <6.6.128, ≥6.7 <6.12.75, ≥6.13 <6.18.16
Weakness classification (CWE)
NVD-CWE-noinfo
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/0f589ee54fd6d76d3f75e745f7f12c64cbd749e5
Patch / mitigation: https://git.kernel.org/stable/c/1b1371cd4032ae859838ebc74215f569987bb197
Patch / mitigation: https://git.kernel.org/stable/c/1b1d3c5d58a80a19d017a409aa2308162bab5bbf
Patch / mitigation: https://git.kernel.org/stable/c/1e300c33ef3cc544c2b9c693778fe9490cfe9184
Patch / mitigation: https://git.kernel.org/stable/c/7e54ff938bebb173822b4c38b33fc164c1cabf92
Patch / mitigation: https://git.kernel.org/stable/c/8320727be7ff704e07c87624efc2a4a75f54b3ce
Patch / mitigation: https://git.kernel.org/stable/c/accd0599bc8e73b962247c6c6c70ca7aa1f8e8d0
Patch / mitigation: https://git.kernel.org/stable/c/ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2
References
- https://git.kernel.org/stable/c/0f589ee54fd6d76d3f75e745f7f12c64cbd749e5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/1b1371cd4032ae859838ebc74215f569987bb197 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/1b1d3c5d58a80a19d017a409aa2308162bab5bbf 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/1e300c33ef3cc544c2b9c693778fe9490cfe9184 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7e54ff938bebb173822b4c38b33fc164c1cabf92 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/8320727be7ff704e07c87624efc2a4a75f54b3ce 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/accd0599bc8e73b962247c6c6c70ca7aa1f8e8d0 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/ffe68c3766997d82e9ccaf1cdbd47eba269c4aa2 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-11-11 23:13 UTC · record ↗