CVE-2024-50224

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: The issue is related to a crash in the SPI driver when not using GPIO chip select. The problem occurs because a NULL pointer is passed to gpiod direction output() when spi get csgpiod() returns a NULL value. This can cause a kernel NULL pointer dereference, leading to a crash. The crash is accompanied by an error message indicating a level 0 translation fault.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.61 or later. As a temporary workaround, consider disabling the SPI driver or avoiding the use of GPIO chip select until a patch is available.