CVE-2024-27028

spi: spi-mt65xx: Fix NULL pointer access in interrupt handler

Description

In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spi_transfer can be a NULL pointer, so the interrupt handler may end up writing to the invalid memory and cause crashes. Add a check to trans->tx_buf before using it.

Category

6.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.68% Top 30%
Third-Party Advisory debian.org Third-Party Advisory debian.org
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/2342b05ec5342a519e00524a507f7a6ea6791a38 patch
https://git.kernel.org/stable/c/55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6 patch
https://git.kernel.org/stable/c/bcfcdf19698024565eff427706ebbd8df65abd11 patch
https://git.kernel.org/stable/c/c10fed329c1c104f375a75ed97ea3abef0786d62 patch
https://git.kernel.org/stable/c/766ec94cc57492eab97cbbf1595bd516ab0cb0e4 patch
https://git.kernel.org/stable/c/62b1f837b15cf3ec2835724bdf8577e47d14c753 patch
https://git.kernel.org/stable/c/bea82355df9e1c299625405b1947fc9b26b4c6d4 patch
https://git.kernel.org/stable/c/1784053cf10a14c4ebd8a890bad5cfe1bee51713 patch
https://git.kernel.org/stable/c/a20ad45008a7c82f1184dc6dee280096009ece55 patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list third party advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html mailing list third party advisory

Frequently Asked Questions

What is the severity of CVE-2024-27028?
CVE-2024-27028 has been scored as a medium severity vulnerability.
How to fix CVE-2024-27028?
To fix CVE-2024-27028, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-27028 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-27028 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-27028?
CVE-2024-27028 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.