In the Linux kernel, the following vulnerability has been resolved:
spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe
In function pci1xxxx_spi_probe, there is a potential null pointer that may be caused by a failed memory allocation by the function devm_kzalloc. Hence, a null pointer check needs to be added to prevent null pointer dereferencing later in the code.
To fix this issue, spi_bus->spi_int[iter] should be checked. The memory allocated by devm_kzalloc will be automatically released, so just directly return -ENOMEM without worrying about memory leaks.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade kernel-syms | Jun 24, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-generic-64kUpgrade linux-image-intel | Jul 12, 2024 | May 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub