CVE-2024-46853

A flaw was found in the Linux kernel. An out-of-bounds write vulnerability exists in the nxp-fspi driver when handling data that is not 4-byte aligned during write operations to the TX FIFO. A local attacker with administrative privileges could exploit this flaw, potentially leading to a system crash (denial of service) or arbitrary code execution.

Access to "drivers/spi" will be a privileged operation that will need an admin/root to exploit this out of bound write scenario.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nxp-fspi kernel module from loading. Create a file named /etc/modprobe.d/blacklist-nxp-fspi.conf with the following content:

blacklist nxp-fspi

Then, regenerate the initramfs:

dracut -f -v

A system reboot is required for the changes to take effect. This mitigation is only effective if the system does not rely on the NXP FSPI driver for essential hardware functionality, as blacklisting it may impact system operation.