CVE-2023-54255

sh: dma: Fix DMA channel offset calculation

N/A

Published: December 30, 2025 at 12:15 PM UTC

Updated: June 17, 2026 at 06:47 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: sh: dma: Fix DMA channel offset calculation Various SoCs of the SH3, SH4 and SH4A family, which use this driver, feature a differing number of DMA channels, which can be distributed between up to two DMAC modules. The existing implementation fails to correctly accommodate for all those variations, resulting in wrong channel offset calculations and leading to kernel panics. Rewrite dma_base_addr() in order to properly calculate channel offsets in a DMAC module. Fix dmaor_read_reg() and dmaor_write_reg(), so that the correct DMAC module base is selected for the DMAOR register.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.5 ≤ v < 4.14.3223.5 ≤ v < 4.19.2913.5 ≤ v < 5.10.1883.5 ≤ v < 5.15.1213.5 ≤ v < 5.4.2513.5 ≤ v < 6.1.393.5 ≤ v < 6.4.43.5 ≤ v < 6.53.57f47c7189b3e8f19a589f77a3ad169d7b691b582

Vendor states this is fixed in 196f6c71905aa384c0177acf194a1144d480333b (fixed)

Vendor states this is fixed in 479380acfa63247b5ac62476138f847aefc62692 (fixed)

Vendor states this is fixed in 4989627157735c1f1619f08e5bc1592418e7c878 (fixed)

Vendor states this is fixed in 8fb11fa4805699c6b73a9c8a9d45807f9874abe3 (fixed)

Vendor states this is fixed in bca700b48c72f4ffeee977a2ed0eb4a6b4b7b8ad (fixed)

Vendor states this is fixed in d1c946552af299f4fa85bf7da15e328123771128 (fixed)

Vendor states this is fixed in e82e47584847129a20b8c9f4a1dcde09374fb0e0 (fixed)

Vendor states this is fixed in e9e33faea104381bac80ac79328f0540fc2969f2 (fixed)

Vendor states this is fixed in 3.5 (unaffected)

Vendor states this is fixed in 4.14.322 (unaffected)

Vendor states this is fixed in 4.19.291 (unaffected)

Vendor states this is fixed in 5.10.188 (unaffected)