PT-2024-34058 · Linux+4 · Linux Kernel+4
Frank Li
·
Published
2024-10-23
·
Updated
2025-10-03
·
CVE-2024-50224
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
The issue is related to a crash in the SPI driver when not using GPIO chip select. The problem occurs because a NULL pointer is passed to
gpiod direction output() when spi get csgpiod() returns a NULL value. This can cause a kernel NULL pointer dereference, leading to a crash. The crash is accompanied by an error message indicating a level 0 translation fault.Recommendations:
To resolve the issue, update the Linux kernel to version 6.6.61 or later. As a temporary workaround, consider disabling the SPI driver or avoiding the use of GPIO chip select until a patch is available.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu