CVE-2025-40356

CVE-2025-40356 affects the Linux kernel driver rockchip_sfc (SPI rockchip-sfc). The underlying issue was incorrect use of the DMA-API: the driver used virt_to_phys() to obtain the DMA address of the transfer buffer instead of dma_map_single(), which caused a DMA memory sync warning. The vulnerabi...