The Linux kernel's rockchip-sfc SPI driver improperly used virt_to_phys() to obtain the DMA address of the transfer buffer, which is not the correct method for DMA operations. This misuse triggered DMA-API debug warnings indicating that the driver attempted to synchronize DMA memory it had not allocated. The vulnerability was addressed by replacing the incorrect address retrieval with the proper dma_map_single() DMA-API call, ensuring correct DMA memory handling and synchronization.

The vulnerability could lead to incorrect DMA memory synchronization, potentially causing data corruption or system instability. The CVSS vector indicates local attack vector with low complexity, requiring low privileges but no user interaction, and impacts confidentiality, integrity, and availability at a high level. However, there are no known exploits in the wild.

A fix is available that corrects the DMA-API usage in the rockchip-sfc SPI driver by using dma_map_single() instead of virt_to_phys(). Users should apply the official Linux kernel updates that include this patch to remediate the vulnerability. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisories for the specific fixed versions and update accordingly.