Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42249
HistoryAug 07, 2024 - 3:14 p.m.

CVE-2024-42249 spi: don't unoptimize message in spi_async()

2024-08-0715:14:33
Linux
github.com
1
linux kernel
vulnerability resolution
spi_async()
spi_maybe_unoptimize_message()
controller driver

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

spi: don’t unoptimize message in spi_async()

Calling spi_maybe_unoptimize_message() in spi_async() is wrong because
the message is likely to be in the queue and not transferred yet. This
can corrupt the message while it is being used by the controller driver.

spi_maybe_unoptimize_message() is already called in the correct place
in spi_finalize_current_message() to balance the call to
spi_maybe_optimize_message() in spi_async().

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42249