CVE-2022-49569

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49569
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49569.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49569
Downstream
Related
Published
2025-02-26T02:23:13.209Z
Modified
2026-04-11T12:44:13.727625Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers
Details

In the Linux kernel, the following vulnerability has been resolved:

spi: bcm2835: bcm2835spihandle_err(): fix NULL pointer deref for non DMA transfers

In case a IRQ based transfer times out the bcm2835spihandleerr() function is called. Since commit 1513ceee70f2 ("spi: bcm2835: Drop dmapending flag") the TX and RX DMA transfers are unconditionally canceled, leading to NULL pointer derefs if ctlr->dmatx or ctlr->dmarx are not set.

Fix the NULL pointer deref by checking that ctlr->dmatx and ctlr->dmarx are valid pointers before accessing them.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49569.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1513ceee70f2bd523e025efe0c715328e1a43ffd
Fixed
76668d2a2f367d25ff448e6d7087406af7d7bb2b
Fixed
684896e675edd8b669fd3e9f547c5038222d85bc
Fixed
58466e05390043d2805685c70f55f3f59711bdf2
Fixed
49ffa473218012e765682343de2052eb4c1f06a7
Fixed
4ceaa684459d414992acbefb4e4c31f2dfc50641

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49569.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.0
Fixed
5.4.208
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.134
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.58
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.15

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49569.json"