The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers
In case a IRQ based transfer times out the bcm2835_spi_handle_err() function is called. Since commit 1513ceee70f2 ("spi: bcm2835: Drop dma_pending flag") the TX and RX DMA transfers are unconditionally canceled, leading to NULL pointer derefs if ctlr->dma_tx or ctlr->dma_rx are not set.
Fix the NULL pointer deref by checking that ctlr->dma_tx and ctlr->dma_rx are valid pointers before accessing them.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-aws-fipsUpgrade linux-hwe-5.15 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub