CVE-2024-42279
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2024-08-17
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transmitting with rx_len == 0, the RX FIFO is not going to be emptied in the interrupt handler. A subsequent transfer could then read crap from the previous transfer out of the RX FIFO into the start RX buffer. The core provides a register that will empty the RX and TX FIFOs, so do that before each transfer.
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 9ac8d17694b66d54b13e9718b25c14ca36dbebbd < 950375a0ba7d6c82ea5b5a44dd48a9e41fa45826 |
| Linux | Linux | 9ac8d17694b66d54b13e9718b25c14ca36dbebbd < 3feda3677e8bbe833c3a62a4091377a08f015b80 |
| Linux | Linux | 9ac8d17694b66d54b13e9718b25c14ca36dbebbd < 45e03d35229b680b79dfea1103a1f2f07d0b5d75 |
| Linux | Linux | 9ac8d17694b66d54b13e9718b25c14ca36dbebbd < 9cf71eb0faef4bff01df4264841b8465382d7927 |
| Linux | Linux | 6.0 |
| linux | linux_kernel | 6.0 – 6.6.44 |