CVE-2024-50224

This CVE affects the Linux kernel SPI driver spi-fsl-dspi, where a crash could occur when GPIO chip select is not used. The root cause is a NULL pointer dereference caused by not validating the return value of spi_get_csgpiod() before passing it to gpiod_direction_output(). The provided details d...

CVE-2024-50224: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add check for the return value of spigetcsgpiod to avoid passing a NULL pointer to gpioddirectionoutput, preventing a crash when GPIO chip select is not used. Fix below...