CVE-2026-43283 net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
A bug in the ec_bhf Ethernet driver causes improper DMA buffer unmapping, potentially leading to memory corruption or instability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43283?
CVE-2026-43283 is a high-severity vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
dma_free_coherent() in error path takes priv->rx_buf.alloc_len as the dma handle. This would lead to improper unmapping of the buffer.
Change the dma handle to priv->rx_buf.alloc_phys.
Which versions are affected by CVE-2026-43283?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43283?
Apply the vendor's patch.
Is CVE-2026-43283 being exploited?
There is no known exploitation of CVE-2026-43283 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43283, DEBIAN-CVE-2026-43283, GHSA-593c-jfqg-mjgp, ROOT-OS-DEBIAN-11-CVE-2026-43283, ROOT-OS-UBUNTU-2204-CVE-2026-43283, ROOT-OS-UBUNTU-2404-CVE-2026-43283 and 1 more.