In the Linux kernel, the following vulnerability has been resolved:
spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
While transmitting with rx_len == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the previous transfer out of the RX FIFO into the start RX buffer. The core provides a register that will empty the RX and TX FIFOs, so do that before each transfer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dtb-amdUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidia | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1017-ibm | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub