VDB

CVE-2023-54255

CVE-2023-54255 PUBLISHED

sh: dma: Fix DMA channel offset calculation

Reported by linux · Published December 30, 2025

In the Linux kernel, the following vulnerability has been resolved: sh: dma: Fix DMA channel offset calculation Various SoCs of the SH3, SH4 and SH4A family, which use this driver, feature a differing number of DMA channels, which can be distributed between up to two DMAC modules. The existing implementation fails to correctly accommodate for all those variations, resulting in wrong channel offset calculations and leading to kernel panics. Rewrite dma_base_addr() in order to properly calculate channel offsets in a DMAC module. Fix dmaor_read_reg() and dmaor_write_reg(), so that the correct DMAC module base is selected for the DMAOR register.

EPSS 0.21% · 11.2th percentile

Risk scores

EPSS Score
0.21%
11.2th percentile

Affected products

VendorProductVersions
LinuxLinux7f47c7189b3e8f19a589f77a3ad169d7b691b582, 7f47c7189b3e8f19a589f77a3ad169d7b691b582, 7f47c7189b3e8f19a589f77a3ad169d7b691b582
LinuxLinux3.5, 0, 4.14.322
linuxlinux_kernel3.5, 3.5, 3.5
LinuxLinux7f47c7189b3e8f19a589f77a3ad169d7b691b582, 7f47c7189b3e8f19a589f77a3ad169d7b691b582, 7f47c7189b3e8f19a589f77a3ad169d7b691b582

Timeline

  • Dec 30, 2025 CVE Published
  • Dec 31, 2025 EPSS Score (30 in total, the first dated here)
  • Apr 15, 2026 CVE Updated
  • Jun 2, 2026 Security Advisory (25 in total, the first dated here)
  • Jul 27, 2026 Coalition ESS Score
  • Oct 4, 2026 Distribution Patch (24 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-54255
vulnetix vdb fixes CVE-2023-54255

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-54255/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›