CVE-2024-50224

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-fsl-dspi: Fix crash when not using GPIO chip select

Add check for the return value of spi_get_csgpiod() to avoid passing a NULL

pointer to gpiod_direction_output(), preventing a crash when GPIO chip

select is not used.

Fix below crash:

[ 4.251960] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000

[ 4.260762] Mem abort info:

[ 4.263556] ESR = 0x0000000096000004

[ 4.267308] EC = 0x25: DABT (current EL), IL = 32 bits

[ 4.272624] SET = 0, FnV = 0

[ 4.275681] EA = 0, S1PTW = 0

[ 4.278822] FSC = 0x04: level 0 translation fault

[ 4.283704] Data abort info:

[ 4.286583] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000

[ 4.292074] CM = 0, WnR = 0, TnD = 0, TagAccess = 0

[ 4.297130] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0

[ 4.302445] [0000000000000000] user address but active_mm is swapper

[ 4.308805] Internal error: Oops: 0000000

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References