The vulnerability of the intel_spi_populate_chip() function in the Linux kernel’s SPI device support driver allows a hacker to cause a service failure.

The vulnerability of the intelspipopulatechip function in the Linux kernel’s SPI device support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2024-46769

In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to set pdata-name. This can return a NULL pointer on failure but this returned value is not checked...

UBUNTU-CVE-2024-46769

In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devmkasprintf returned value intelspipopulatechip use devmkasprintf to set pdata-name. This can return a NULL pointer on failure but this returned value is not checked...

CVE-2024-46769

CVE-2024-46769 relates to the Linux kernel SPI Intel driver. A check for the pointer returned by devm_kasprintf() in intel_spi_populate_chip() was missing, allowing a NULL pointer to be used for pdata->name. The vulnerability has been resolved in the kernel with the fix described in the linked...

PT-2024-32183 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the intel spi populate chip function using devm kasprintf to set pdata-name, which can return a NULL pointer on failure, but this returned value is not checked...