CVE-2024-26776

MEDIUM

Linux Kernel < 5.10.211 - NULL Pointer Dereference

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected Return IRQ_NONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: complete+0x54/0x100 hisi_sfc_v3xx_isr+0x2c/0x40 [spi_hisi_sfc_v3xx] __handle_irq_event_percpu+0x64/0x1e0 handle_irq_event+0x7c/0x1cc

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 1.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-476
Status published

Affected Products (8)

linux/linux_kernel < 5.10.211
linux/linux_kernel
debian/debian_linux
linux/Kernel < 5.10.211linux
linux/Kernel < 5.15.150linux
linux/Kernel < 6.1.80linux
linux/Kernel < 6.6.19linux
linux/Kernel < 6.7.7linux

Timeline

Published Apr 03, 2024
Tracked Since Feb 18, 2026