6 matches found
CVE-2026-98298
A flaw was found in the Linux kernel's MMP Peripheral Direct Memory Access PDMA driver. When preparing multi-entry scatter-gather lists for Direct Memory Access DMA transfers, the driver incorrectly reads the buffer length from the initial list entry rather than the active entry being processed. ...
PT-2026-115721
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp pdma: fix wrong sg length in mmp pdma prep slave sg In mmp pdma prep slave sg, for each sg iterates the scatterlist putting each entry into 'sg', but the entry length is read from 'sgl' the list head instead of 'sg...
PT-2026-106627
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mmp pdma prep slave sg function within the dmaengine component. During the iteration of the scatterlist using for each sg, the entry length is incorrectly read from t...
CVE-2025-71221 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmppdma: Fix race condition in mmppdmaresidue Add proper locking in mmppdmaresidue to prevent use-after-free when accessing descriptor list and descriptor contents. The race occurs when multiple threads call txstatus...
Linux Distros Unpatched Vulnerability : CVE-2025-71221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: mmppdma: Fix race condition in mmppdmaresidue Add proper locking in mmppdmaresidue to prevent use-after-free when accessing descriptor list and...
PT-2026-8178
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mmp pdma residue function within the dmaengine subsystem of the Linux kernel. This condition can lead to a use-after-free issue when accessing the descript...