Back to CVE records
Not yet scoredPublished Dec 30, 2025

CVE-2023-54255sh: dma: Fix DMA channel offset calculation

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: sh: dma: Fix DMA channel offset calculation Various SoCs of the SH3, SH4 and SH4A family, which use this driver, feature a differing number of DMA channels, which can be distributed between up to two DMAC modules. The existing implementation fails to correctly accommodate for all those variations, resulting in wrong channel offset calculations and leading to kernel panics. Rewrite dma_base_addr() in order to properly calculate channel offsets in a DMAC module. Fix dmaor_read_reg() and dmaor_write_reg(), so that the correct DMAC module base is selected for the DMAOR register.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before bca700b48c72f4ffeee977a2ed0eb4a6b4b7b8ad; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before 479380acfa63247b5ac62476138f847aefc62692; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before 4989627157735c1f1619f08e5bc1592418e7c878; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before d1c946552af299f4fa85bf7da15e328123771128; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before 196f6c71905aa384c0177acf194a1144d480333b; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before 8fb11fa4805699c6b73a9c8a9d45807f9874abe3; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before e9e33faea104381bac80ac79328f0540fc2969f2; from 7f47c7189b3e8f19a589f77a3ad169d7b691b582 before e82e47584847129a20b8c9f4a1dcde09374fb0e0
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.