CVE-2024-26776: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
In the Linux kernel, the following vulnerability has been resolved:
spi: hisi-sfc-v3xx: Return IRQNONE if no interrupts were detected
Return IRQNONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: complete+0x54/0x100 hisisfcv3xxisr+0x2c/0x40 [spihisisfcv3xx] handleirqeventpercpu+0x64/0x1e0 handleirqevent+0x7c/0x1cc
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26776?
CVE-2024-26776 has been classified with medium severity due to potential null pointer errors from empty interrupts.
How do I fix CVE-2024-26776?
To fix CVE-2024-26776, upgrade to one of the patched kernel versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What software is affected by CVE-2024-26776?
CVE-2024-26776 affects the Linux kernel versions prior to the specified patched releases.
What is the impact of CVE-2024-26776?
The impact of CVE-2024-26776 can lead to system instability due to null pointer dereferences when handling interrupts.
Is there a workaround for CVE-2024-26776?
There are no known effective workarounds for CVE-2024-26776; upgrading to a patched version is the recommended action.