In the Linux kernel, the following vulnerability has been resolved:
spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
The TX buffer in spi_transfer can be a NULL pointer, so the interrupt
handler may end up writing to the invalid memory and cause crashes.
Add a check to trans->tx_buf before using it.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/spi/spi-mt65xx.c"
],
"versions": [
{
"version": "1ce24864bff4",
"lessThan": "2342b05ec534",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "55f8ea6731aa",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "bcfcdf196980",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "c10fed329c1c",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "766ec94cc574",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "62b1f837b15c",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "bea82355df9e",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "1784053cf10a",
"status": "affected",
"versionType": "git"
},
{
"version": "1ce24864bff4",
"lessThan": "a20ad45008a7",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/spi/spi-mt65xx.c"
],
"versions": [
{
"version": "4.11",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.11",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.311",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.273",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.214",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.153",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.83",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.23",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.7.11",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8.2",
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.9",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/1784053cf10a14c4ebd8a890bad5cfe1bee51713
git.kernel.org/stable/c/2342b05ec5342a519e00524a507f7a6ea6791a38
git.kernel.org/stable/c/55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6
git.kernel.org/stable/c/62b1f837b15cf3ec2835724bdf8577e47d14c753
git.kernel.org/stable/c/766ec94cc57492eab97cbbf1595bd516ab0cb0e4
git.kernel.org/stable/c/a20ad45008a7c82f1184dc6dee280096009ece55
git.kernel.org/stable/c/bcfcdf19698024565eff427706ebbd8df65abd11
git.kernel.org/stable/c/bea82355df9e1c299625405b1947fc9b26b4c6d4
git.kernel.org/stable/c/c10fed329c1c104f375a75ed97ea3abef0786d62
lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.org/debian-lts-announce/2024/06/msg00020.html