Skip to content
Heist/ feed
High

nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following uninit-value access issue [1][2]: nci_rx_work() parses and processes received packet. When the payload length is zero, each message type handler reads uninitialized payload and KMSAN detects this issue. The receipt of a packet with a zero-size payload is considered unexpected, and therefore, such packets should be silently discarded. This patch resolved this issue by checking payload size before calling each message type handler codes.

Announced Source revision 1
Original source ↗

CVE-2024-35915

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-35915

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "11387b2effbb55f58dc2111ef4b4b896f2756240",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "03fe259649a551d336a7f20919b641ea100e3fff",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "755e53bbc61bc1aff90eafa64c8c2464fd3dfa3c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "ac68d9fa09e410fa3ed20fb721d56aa558695e16",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "b51ec7fc9f877ef869c01d3ea6f18f6a64e831a7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "a946ebee45b09294c8b0b0e77410b763c4d2817a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "8948e30de81faee87eeee01ef42a1f6008f5a83a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6a2968aaf50c7a22fced77a5e24aa636281efca8",
        "lessThan": "d24b03535e5eb82e025219c2f632b485409c898f",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/nfc/nci/core.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.2"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.2",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.312",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.274",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.215",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.154",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.85",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.26",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.5",
        "versionType": "semver",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/nfc/nci/core.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-35915

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#26541 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement