An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19b61392c5a852b4e8a0bf35aecb969983c5932d Exploit, Mailing List, Patch, Vendor Advisory
- https://lkml.org/lkml/2020/2/3/559 Exploit, Mailing List, Patch, Technical Description
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19b61392c5a852b4e8a0bf35aecb969983c5932d Exploit, Mailing List, Patch, Vendor Advisory
- https://lkml.org/lkml/2020/2/3/559 Exploit, Mailing List, Patch, Technical Description
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · linux, debian, canonicalNVD modified 2026-10-08 21:17
Affected (CPE criteria) 25
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
References 18
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html Mailing List, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19b61392c5a852b4e8a0bf35aecb969983c5932d Exploit, Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html Mailing List, Third Party Advisory
- https://lkml.org/lkml/2020/2/3/559 Exploit, Mailing List, Patch, Technical Description
- https://security.netapp.com/advisory/ntap-20200608-0001/ Third Party Advisory
- https://usn.ubuntu.com/4391-1/ Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html Mailing List, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19b61392c5a852b4e8a0bf35aecb969983c5932d Exploit, Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html Mailing List, Third Party Advisory
- https://lkml.org/lkml/2020/2/3/559 Exploit, Mailing List, Patch, Technical Description
- https://security.netapp.com/advisory/ntap-20200608-0001/ Third Party Advisory
- https://usn.ubuntu.com/4391-1/ Third Party Advisory