Description
In the Linux kernel, the following vulnerability has been resolved:
spi: intel: Add check devm_kasprintf() returned value
intel_spi_populate_chip() use devm_kasprintf() to set pdata->name. This can return a NULL pointer on failure but this returned value is not checked.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= e58db3bcd93b9e0bf5068a29f7e1a97c29926830, < 6e68abdc5d674f9f4185bf1e1956368d05df4838; >= e58db3bcd93b9e0bf5068a29f7e1a97c29926830, < 2920294686ec23211637998f3ec386dfd3d784a6 |
| Linux | Linux | 6.9 |
References
Timeline
- Published
- Sep 18, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed