Security readout for executives and security teams
Plain-English summary
This is a Linux kernel crash-class flaw in the MediaTek SPI controller driver. If the driver handles a transfer with no transmit buffer, its interrupt handler can touch invalid memory. The sourced record rates it medium, with low integrity and availability impact and no confidentiality impact.
Executive priority
Treat as a moderate kernel maintenance item. Prioritize embedded, appliance, and MediaTek-based Linux fleets first. It is not sourced as actively exploited, but kernel crash risk warrants timely patching through normal change control.
Technical view
CVE-2024-27028 is a CWE-476 NULL pointer issue in Linux kernel spi-mt65xx. The fix adds a check before using trans->tx_buf in the interrupt handler. The CVE lists affected Linux kernel ranges and multiple stable kernel backport commits, plus Debian LTS advisories.
Likely exposure
Exposure is most likely on Linux systems running affected kernels where the MediaTek spi-mt65xx SPI driver is built, loaded, or relevant to the hardware platform. Generic Linux servers without that driver or hardware are less likely exposed, but kernel configuration should be verified.
Exploitation context
The source bundle does not show KEV listing or confirmed active exploitation. The CVSS vector reports network attack vector, low complexity, no privileges, and no user interaction, but the public description only confirms a NULL pointer crash condition in the driver interrupt path.
Researcher notes
Evidence is limited to the CVE record, stable kernel commits, and Debian LTS announcements. Do not assume broad exploitability beyond affected Linux kernels and the spi-mt65xx driver path. The concrete fix is a NULL check for trans->tx_buf before use.
Mitigation direction
- Update to a vendor kernel containing the listed stable fixes.
- Review Debian LTS advisories if using Debian-packaged kernels.
- Prioritize affected MediaTek-based Linux platforms and custom kernels.
- If no package fix exists, check vendor guidance before applying workarounds.
- Retire or rebuild unsupported kernels that cannot receive the fix.
Validation and detection
- Inventory Linux kernel versions across managed assets.
- Check whether spi-mt65xx is built, loaded, or required.
- Confirm installed kernels include the referenced stable fix commit.
- Review distribution advisories for patched package versions.
- Test patched kernels on representative MediaTek hardware before rollout.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-476: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2024-27028 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L3.92.5CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
6.5MediumVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/2342b05ec5342a519e00524a507f7a6ea6791a38CVE reference, Linux
- https://git.kernel.org/stable/c/55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6CVE reference, Linux
- https://git.kernel.org/stable/c/bcfcdf19698024565eff427706ebbd8df65abd11CVE reference, Linux
- https://git.kernel.org/stable/c/c10fed329c1c104f375a75ed97ea3abef0786d62CVE reference, Linux
- https://git.kernel.org/stable/c/766ec94cc57492eab97cbbf1595bd516ab0cb0e4CVE reference, Linux
- https://git.kernel.org/stable/c/62b1f837b15cf3ec2835724bdf8577e47d14c753CVE reference, Linux
- https://git.kernel.org/stable/c/bea82355df9e1c299625405b1947fc9b26b4c6d4CVE reference, Linux
- https://git.kernel.org/stable/c/1784053cf10a14c4ebd8a890bad5cfe1bee51713CVE reference, Linux
- https://git.kernel.org/stable/c/a20ad45008a7c82f1184dc6dee280096009ece55CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlCVE reference, CVE · x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlCVE reference, CVE · x_transferred
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.