spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Prevent NULL pointer dereference when spi_get_device_id() returns NULL, which can happen when using driver_override without matching SPI ID entry.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From bd1be85dbbbd4076e8dbdceefc3c4d2c673e0075 · fixed in 1fa4484116d14a0356edfeb6ecc7ea3b370911b1; From 027eaeaf3294607104e90e84cec3f55e792cab22 · fixed in aa966ccea3584a70c9a6030f4a16577030db35e5; From aea672d054a21782ed8450c75febb6ba3c208ca4 · fixed in 359b3442e66c595ed03e5a6b0493b66600c63941; From aea672d054a21782ed8450c75febb6ba3c208ca4 · fixed in 3fcd9415144f4fbd21e1bef35a7f8dbd734f607d; From aea672d054a21782ed8450c75febb6ba3c208ca4 · fixed in 72cc9c6d6fba5b4e0aaf89126884a56bb54b92f8; From aea672d054a21782ed8450c75febb6ba3c208ca4 · fixed in f1b061b4d4c6cbf861319ba954caa80145cf018f; From 5.15.146 · fixed in 5.15.222; From 6.1.71 · fixed in 6.1.189
- Linux Linux
6.2
- KernelLinux
fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; fixed in 6.12.111; From 6.7.0 · fixed in 6.18.53