Vulnerability of the devm_spi_alloc_master() function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 18 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 15 Views

Vulnerability in devm_spi_alloc_master() in drivers/spi/spi.c could compromise data confidentiality and integrity.

Reporter	Title	Published	Views	Family All 158
ATTACKERKB	CVE-2021-46959	29 Feb 202423:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2021-1685 (ALAS-2021-1685)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-004 (ALASKERNEL-5.4-2022-004)	2 May 202200:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-7506-1)	12 May 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986458)	7 Oct 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986471)	7 Oct 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987345)	7 Oct 202500:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/8735248ebb918d25427965f0db07939ed0473ec6
git	www.git.kernel.org/stable/c/8bf96425c90f5c1dcf3b7b9df568019a1d4b8a0e
git	www.git.kernel.org/stable/c/001c8e83646ad3b847b18f6ac55a54367d917d74
git	www.git.kernel.org/stable/c/cee78aa24578edac8cf00513dca618c0acc17cd7
git	www.git.kernel.org/stable/c/62bb2c7f2411a0045c24831f11ecacfc35610815
git	www.git.kernel.org/stable/c/c7fabe372a9031acd00498bc718ce27c253abfd1
git	www.git.kernel.org/stable/c/794aaf01444d4e765e2b067cba01cc69c1c68ed9
git	www.git.kernel.org/stable/c/8e029707f50a82c53172359c686b2536ab54e58c
git	www.git.kernel.org/stable/c/28a5529068c51cdf0295ab1e11a99a3a909a03e4
lore	www.lore.kernel.org/linux-cve-announce/2024022916-CVE-2021-46959-f517@gregkh/T/

18 Mar 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26.8

CVSS 37.8

EPSS0.00245

devm_spi_alloc_master linux kernel spi memory reclamation data confidentiality data integrity