{"cve":"CVE-2023-52511","nvd":{"published":"2024-03-02T22:15:47.640","modified":"2026-06-17T06:42:54.010","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: sun6i: reduce DMA RX transfer width to single byte\n\nThrough empirical testing it has been determined that sometimes RX SPI\ntransfers with DMA enabled return corrupted data. This is down to single\nor even multiple bytes lost during DMA transfer from SPI peripheral to\nmemory. It seems the RX FIFO within the SPI peripheral can become\nconfused when performing bus read accesses wider than a single byte to it\nduring an active SPI transfer.\n\nThis patch reduces the width of individual DMA read accesses to the\nRX FIFO to a single byte to mitigate that issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3},"cwes":[],"references":["https://git.kernel.org/stable/c/171f8a49f212e87a8b04087568e1b3d132e36a18","https://git.kernel.org/stable/c/b3c21c9c7289692f4019f163c3b06d8bdf78b355","https://git.kernel.org/stable/c/e15bb292b24630ee832bfc7fd616bd72c7682bbb","https://git.kernel.org/stable/c/ff05ed4ae214011464a0156f05cac1b0b46b5fbc","https://git.kernel.org/stable/c/171f8a49f212e87a8b04087568e1b3d132e36a18"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T21:46:54.846886191+00:00"},"epss":{"cve":"CVE-2023-52511","score":0.00811,"percentile":0.56972,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}