PT-2024-29830 · Linux+5 · Linux Kernel+5
Published
2024-08-17
·
Updated
2026-03-13
·
CVE-2024-42279
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the spi: microchip-core in the Linux kernel, where the RX FIFO is not emptied in the interrupt handler when transmitting with
rx len == 0. This can cause a subsequent transfer to read incorrect data from the previous transfer out of the RX FIFO into the start RX buffer. The core provides a register that can empty the RX and TX FIFOs, which should be used before each transfer.Recommendations
Update to Linux kernel version 6.6.50 or later to resolve the issue.
As a temporary workaround, consider using the register provided by the core to empty the RX and TX FIFOs before each transfer.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu