CVE - CVE-2022-49569

CVE-ID
CVE-2022-49569	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers In case a IRQ based transfer times out the bcm2835_spi_handle_err() function is called. Since commit 1513ceee70f2 ("spi: bcm2835: Drop dma_pending flag") the TX and RX DMA transfers are unconditionally canceled, leading to NULL pointer derefs if ctlr->dma_tx or ctlr->dma_rx are not set. Fix the NULL pointer deref by checking that ctlr->dma_tx and ctlr->dma_rx are valid pointers before accessing them.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/49ffa473218012e765682343de2052eb4c1f06a7 URL:https://git.kernel.org/stable/c/49ffa473218012e765682343de2052eb4c1f06a7 MISC:https://git.kernel.org/stable/c/4ceaa684459d414992acbefb4e4c31f2dfc50641 URL:https://git.kernel.org/stable/c/4ceaa684459d414992acbefb4e4c31f2dfc50641 MISC:https://git.kernel.org/stable/c/58466e05390043d2805685c70f55f3f59711bdf2 URL:https://git.kernel.org/stable/c/58466e05390043d2805685c70f55f3f59711bdf2 MISC:https://git.kernel.org/stable/c/684896e675edd8b669fd3e9f547c5038222d85bc URL:https://git.kernel.org/stable/c/684896e675edd8b669fd3e9f547c5038222d85bc MISC:https://git.kernel.org/stable/c/76668d2a2f367d25ff448e6d7087406af7d7bb2b URL:https://git.kernel.org/stable/c/76668d2a2f367d25ff448e6d7087406af7d7bb2b
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)