CVE-2024-50224

Summary

CVE-2024-50224: A vulnerability in the Linux kernel has been addressed, which affected the spi-fsl-dspi driver. This issue caused a crash when the GPIO chip select was not used, leading to a kernel NULL pointer dereference. The problem was due to a failure to check the return value of spi_get_csgpiod(), resulting in a NULL pointer being passed to gpiod_direction_output(). With this patch, a check has been added to prevent such crashes from occurring.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.