In the Linux kernel, the following vulnerability has been resolved:
spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
The TX buffer in spi_transfer can be a NULL pointer, so the interrupt handler may end up writing to the invalid memory and cause crashes.
Add a check to trans->tx_buf before using it.
[
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "228353213198157474155307640593740559207",
"length": 2254.0
},
"id": "CVE-2024-27028-2d92edcb",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a20ad45008a7c82f1184dc6dee280096009ece55",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"19270198871908115786166826225243340147",
"123058545104224406806134848554664716477",
"177259821457419496637963547560694522236",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"340095338502137890289387373529087754837",
"142004915179584588797185969686244794436"
]
},
"id": "CVE-2024-27028-37840ab9",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"74830922006740076896743025019108565954",
"135557789027794821826926376944687065976",
"85103329701272388949391428438380916965",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"64822000856301599168212357056688233863",
"85629118071849870245077762908078501036"
]
},
"id": "CVE-2024-27028-3a3a1dcf",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a20ad45008a7c82f1184dc6dee280096009ece55",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "91873946638268454380013211611156636820",
"length": 2168.0
},
"id": "CVE-2024-27028-4417ef98",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "91873946638268454380013211611156636820",
"length": 2168.0
},
"id": "CVE-2024-27028-58ef936a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2342b05ec5342a519e00524a507f7a6ea6791a38",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "228353213198157474155307640593740559207",
"length": 2254.0
},
"id": "CVE-2024-27028-650a8db2",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1784053cf10a14c4ebd8a890bad5cfe1bee51713",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"19270198871908115786166826225243340147",
"123058545104224406806134848554664716477",
"177259821457419496637963547560694522236",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"340095338502137890289387373529087754837",
"142004915179584588797185969686244794436"
]
},
"id": "CVE-2024-27028-6b011ceb",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@766ec94cc57492eab97cbbf1595bd516ab0cb0e4",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"19270198871908115786166826225243340147",
"123058545104224406806134848554664716477",
"177259821457419496637963547560694522236",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"340095338502137890289387373529087754837",
"142004915179584588797185969686244794436"
]
},
"id": "CVE-2024-27028-7e8964f4",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2342b05ec5342a519e00524a507f7a6ea6791a38",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"19270198871908115786166826225243340147",
"123058545104224406806134848554664716477",
"177259821457419496637963547560694522236",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"340095338502137890289387373529087754837",
"142004915179584588797185969686244794436"
]
},
"id": "CVE-2024-27028-952b09a4",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bcfcdf19698024565eff427706ebbd8df65abd11",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"74830922006740076896743025019108565954",
"135557789027794821826926376944687065976",
"85103329701272388949391428438380916965",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"64822000856301599168212357056688233863",
"85629118071849870245077762908078501036"
]
},
"id": "CVE-2024-27028-a03a2faa",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1784053cf10a14c4ebd8a890bad5cfe1bee51713",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "228353213198157474155307640593740559207",
"length": 2254.0
},
"id": "CVE-2024-27028-ab7cbdf9",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bea82355df9e1c299625405b1947fc9b26b4c6d4",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "91873946638268454380013211611156636820",
"length": 2168.0
},
"id": "CVE-2024-27028-d5d8916f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bcfcdf19698024565eff427706ebbd8df65abd11",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c",
"function": "mtk_spi_interrupt"
},
"digest": {
"function_hash": "228353213198157474155307640593740559207",
"length": 2254.0
},
"id": "CVE-2024-27028-d8e3949d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@766ec94cc57492eab97cbbf1595bd516ab0cb0e4",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/spi/spi-mt65xx.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"74830922006740076896743025019108565954",
"135557789027794821826926376944687065976",
"85103329701272388949391428438380916965",
"72821043292870678877330936767637059368",
"19338009102525898067924841316919892294",
"309275421735324523845020009257654272848",
"193811062347270006971555417750126912812",
"227937865554473495375586815213269548274",
"221095413013507395084167478021145610785",
"169602568000361890358152356416814552514",
"314354508602788874566637081451138647286",
"64822000856301599168212357056688233863",
"85629118071849870245077762908078501036"
]
},
"id": "CVE-2024-27028-dab38b0b",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bea82355df9e1c299625405b1947fc9b26b4c6d4",
"signature_version": "v1"
}
]