CVE-2024-42279

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the spi: microchip-core in the Linux kernel, where the RX FIFO is not emptied in the interrupt handler when transmitting with rx len == 0. This can cause a subsequent transfer to read incorrect data from the previous transfer out of the RX FIFO into the start RX buffer. The core provides a register that can empty the RX and TX FIFOs, which should be used before each transfer.

Recommendations Update to Linux kernel version 6.6.50 or later to resolve the issue. As a temporary workaround, consider using the register provided by the core to empty the RX and TX FIFOs before each transfer.