CVE-2022-49569
spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers In case a IRQ based transfer times out the bcm2835_spi_handle_err() function is called. Since commit 1513ceee70f2 ("spi: bcm2835: Drop dma_pending flag") the TX and RX DMA transfers are unconditionally canceled, leading to NULL pointer derefs if ctlr->dma_tx or ctlr->dma_rx are not set. Fix the NULL pointer deref by checking that ctlr->dma_tx and ctlr->dma_rx are valid pointers before accessing them.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Feb 26, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new medium vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
1513ceee70f2bd523e025efe0c715328e1a43ffd < 76668d2a2f367d25ff448e6d7087406af7d7bb2b 1513ceee70f2bd523e025efe0c715328e1a43ffd < 684896e675edd8b669fd3e9f547c5038222d85bc 1513ceee70f2bd523e025efe0c715328e1a43ffd < 58466e05390043d2805685c70f55f3f59711bdf2 1513ceee70f2bd523e025efe0c715328e1a43ffd < 49ffa473218012e765682343de2052eb4c1f06a7 1513ceee70f2bd523e025efe0c715328e1a43ffd < 4ceaa684459d414992acbefb4e4c31f2dfc50641
Linux / Linux
5.4
References
git.kernel.org: https://git.kernel.org/stable/c/76668d2a2f367d25ff448e6d7087406af7d7bb2b git.kernel.org: https://git.kernel.org/stable/c/684896e675edd8b669fd3e9f547c5038222d85bc git.kernel.org: https://git.kernel.org/stable/c/58466e05390043d2805685c70f55f3f59711bdf2 git.kernel.org: https://git.kernel.org/stable/c/49ffa473218012e765682343de2052eb4c1f06a7 git.kernel.org: https://git.kernel.org/stable/c/4ceaa684459d414992acbefb4e4c31f2dfc50641