CVE-2024-27028 — NULL Pointer Dereference in Linux
Severity
6.5MEDIUMNVD
OSV7.0OSV5.5
EPSS
0.2%
top 60.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Latest updateJul 26
Description
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
The TX buffer in spi_transfer can be a NULL pointer, so the interrupt
handler may end up writing to the invalid memory and cause crashes.
Add a check to trans->tx_buf before using it.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5
Affected Packages9 packages
▶CVEListV5linux/linux1ce24864bff40e11500a699789412115fdf244bf — 2342b05ec5342a519e00524a507f7a6ea6791a38+9
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
22📋Vendor Advisories
23💬Community
1Bugzilla
▶