CVE-2024-56771

mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information

Medium · published January 8, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information

These four chips:

* W25N512GW

* W25N01GW

* W25N01JW

* W25N02JW

all require a single bit of ECC strength and thus feature an on-die

Hamming-like ECC engine. There is no point in filling a ->get_status()

callback for them because the main ECC status bytes are located in

standard places, and retrieving the number of bitflips in case of

corrected chunk is both useless and unsupported (if there are bitflips,

then there is 1 at most, so no need to query the chip for that).

Without this change, a kernel warning triggers every time a bit flips.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Published
2025-01-08T17:49Z
EPSS history
Timeline
  • 08 JAN 17:49Z
    mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
    cvelistv5