Vulnerability in spi-fsl-qspi Package
Summary
GSD-2022-1003401: spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname(). Affects Kernel versions >= 858e26a515c28df3ef542d9c09493b54a329d6cf, < 10f537219629769498ecb8515e096be213224c24. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The spi-fsl-qspi package is a component of the Linux Kernel ecosystem. It provides support for the Freescale Quad SPI controller. This controller enables communication between the processor and external SPI devices. The vulnerability in question arises from a failure to check the return value after calling the platform_get_resource_byname() function.
Vulnerability Detail
The vulnerability in spi-fsl-qspi allows for potential security risks. Although the impact and plausibility of an attack have not been proven, it is crucial to address this issue. The vulnerability was introduced in version v5.8 of the Linux Kernel and fixed in version v5.15.46. For more technical details, please refer to the references link.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.46 or later. This update includes the necessary commit (10f537219629769498ecb8515e096be213224c24) that resolves the issue.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the spi-fsl-qspi package in the Linux Kernel is vulnerable to a security issue. It is recommended to update to the latest version of the Linux Kernel to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
spi-fsl-qspi is a package in the Linux Kernel ecosystem that provides support for the Freescale Quad SPI controller.
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven.
You can use Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
This vulnerability was introduced in version v5.8 of the Linux Kernel by commit 858e26a515c28df3ef542d9c09493b54a329d6cf.
To fix this vulnerability, update your Linux Kernel to version v5.15.46 or later, which includes the necessary commit (10f537219629769498ecb8515e096be213224c24) to resolve the issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.