CVE-2022-49569

Summary

CVE-2022-49569 is a vulnerability affecting the Linux kernel's SPI driver for Broadcom BCM2835 chips. When an IRQ-based transfer times out, the bcm2835_spi_handle_err() function may encounter NULL pointer dereferencing due to the unconditional cancellation of DMA transfers since commit 1513ceee70f2. This issue arises when the ctlr->dma_tx or ctlr->dma_rx pointers are not set, resulting in a potential crash or exploitation. The vulnerability has been mitigated by implementing checks to ensure valid pointers are accessed before any operations are performed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.