CVE-2022-49173 Details
Description
In the Linux kernel, the following vulnerability has been resolved: spi: fsi: Implement a timeout for polling status The data transfer routines must poll the status register to determine when more data can be shifted in or out. If the hardware gets into a bad state, these polling loops may never exit. Prevent this by returning an error if a timeout is exceeded.
A vulnerability in the Linux kernel's SPI FSI data transfer routines has been addressed. The issue arose because these routines needed to poll the status register to manage data transfer. In cases where the hardware malfunctioned, these polling loops could become stuck indefinitely. The vulnerability has been resolved by implementing a timeout for the polling process, ensuring that an error is returned if the timeout is exceeded.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/89b35e3f28514087d3f1e28e8f5634fbfd07c554 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d4982ceb137e6ecd2b466a6de639790a148cf19a | kernel.org | Patch |
| https://git.kernel.org/stable/c/dac1438f347d3b8cf892105c94e254f29c5764de | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.7, < 5.16.19 >= 5.17, < 5.17.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 22, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |