NetSight
IP …
medium6.5

CVE-2024-27028

In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spi_transfer…

Impact

In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spi_transfer can be a NULL pointer, so the interrupt handler may end up writing to the invalid memory and cause crashes. Add a check to trans->tx_buf before using it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.11 before 4.19.311
from 4.20 before 5.4.273
from 5.5 before 5.10.214
from 5.11 before 5.15.153
from 5.16 before 6.1.83
from 6.2 before 6.6.23
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References