CVE-2024-26776

MEDIUM

Linux Kernel - NULL Pointer Dereference in SPI hisi-sfc-v3xx Interrupt Handler

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected Return IRQ_NONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: complete+0x54/0x100 hisi_sfc_v3xx_isr+0x2c/0x40 [spi_hisi_sfc_v3xx] __handle_irq_event_percpu+0x64/0x1e0 handle_irq_event+0x7c/0x1cc

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 1.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (22)
debian/debian_linux 10.0
linux/Kernel 5.11.0 - 5.15.150linux
linux/Kernel 5.16.0 - 6.1.80linux
linux/Kernel 5.6.0 - 5.10.211linux
linux/Kernel 6.2.0 - 6.6.19linux
linux/Kernel 6.7.0 - 6.7.7linux
Linux/Linux < 5.6
Linux/Linux 5.10.211 - 5.10.*
Linux/Linux 5.15.150 - 5.15.*
Linux/Linux 5.6
... and 12 more
Published Apr 03, 2024
Tracked Since Feb 18, 2026