CVE-2024-42279

spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

State
Published
Severity
7.8 High
Published
Aug 17, 2024
Updated
Oct 30, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer

While transmitting with rx_len == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the previous transfer out of the RX FIFO into the start RX buffer. The core provides a register that will empty the RX and TX FIFOs, so do that before each transfer.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9ac8d17694b66d54b13e9718b25c14ca36dbebbd to before 950375a0ba7d6c82ea5b5a44dd48a9e41fa45826Affected
  • 9ac8d17694b66d54b13e9718b25c14ca36dbebbd to before 3feda3677e8bbe833c3a62a4091377a08f015b80Affected
  • 9ac8d17694b66d54b13e9718b25c14ca36dbebbd to before 45e03d35229b680b79dfea1103a1f2f07d0b5d75Affected
  • 9ac8d17694b66d54b13e9718b25c14ca36dbebbd to before 9cf71eb0faef4bff01df4264841b8465382d7927Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.