Re: [PATCH net] net: korina: fix dma_unmap_single() length in korina_rx()

From: Daniel Machon

Date: Wed Oct 14 2026 - 15:59:19 EST


> dma_map_single() is called with size KORINA_RBSIZE and
> dma_unmap_single() is called with size pkt_len which might be smaller.
> Therefore, parts of the buffer may stay mapped after dma_unmap_single()
> is called, which leaks a resource and might leave exposed mapped memory
> that might be eventually freed.
>
> Change dma_unmap_single() length to KORINA_RBSIZE.

Reviewed-by: Daniel Machon <daniel.machon@xxxxxxxxxxxxx>