漏洞标题
spi:spi-imx:添加对spi_imx_setupxfer()的检查
漏洞描述信息
## 概述
在Linux内核中,解决了一个与SPI接口相关的问题。具体来说,`spi_imx_setupxfer()`函数的返回值需要进行检查,以避免在函数指针为空时导致空指针引用错误。
## 细节
`spi_imx->rx`和`spi_imx->tx`函数指针可能为`NULL`,当`spi_imx_setupxfer()`返回错误时,会导致空指针引用错误。具体调用栈如下:
```
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
Call trace:
0x0
spi_imx_pio_transfer+0x50/0xd8
spi_imx_transfer_one+0x18c/0x858
spi_transfer_one_message+0x43c/0x790
__spi_pump_transfer_message+0x238/0x5d4
__spi_sync+0x2b0/0x454
spi_write_then_read+0x11c/0x200
```
## 影响
该漏洞可能导致系统在处理SPI传输时出现空指针引用错误,从而导致系统崩溃或不稳定。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
漏洞类别
空指针解引用
漏洞标题
spi: spi-imx: Add check for spi_imx_setupxfer()
漏洞描述信息
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-imx: Add check for spi_imx_setupxfer()
Add check for the return value of spi_imx_setupxfer().
spi_imx->rx and spi_imx->tx function pointer can be NULL when
spi_imx_setupxfer() return error, and make NULL pointer dereference.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
Call trace:
0x0
spi_imx_pio_transfer+0x50/0xd8
spi_imx_transfer_one+0x18c/0x858
spi_transfer_one_message+0x43c/0x790
__spi_pump_transfer_message+0x238/0x5d4
__spi_sync+0x2b0/0x454
spi_write_then_read+0x11c/0x200
CVSS信息
N/A
漏洞类别
N/A