Skip to content
Heist/ feed
High

nfc: nci: Fix uninit-value in nci_rx_work

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.

Announced Source revision 1
Original source ↗

CVE-2024-38381

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-38381

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "11387b2effbb55f58dc2111ef4b4b896f2756240",
        "lessThan": "406cfac9debd4a6d3dc5d9258ee086372a8c08b6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "03fe259649a551d336a7f20919b641ea100e3fff",
        "lessThan": "485ded868ed62ceb2acb3a459d7843fd71472619",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "755e53bbc61bc1aff90eafa64c8c2464fd3dfa3c",
        "lessThan": "f80b786ab0550d0020191a59077b2c7e069db2d1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "ac68d9fa09e410fa3ed20fb721d56aa558695e16",
        "lessThan": "ad4d196d2008c7f413167f0a693feb4f0439d7fe",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b51ec7fc9f877ef869c01d3ea6f18f6a64e831a7",
        "lessThan": "e8c8e0d0d214c877fbad555df5b3ed558cd9b0c3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a946ebee45b09294c8b0b0e77410b763c4d2817a",
        "lessThan": "e53a7f8afcbd2886f2a94c5d56757328109730ea",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d24b03535e5eb82e025219c2f632b485409c898f",
        "lessThan": "017ff397624930fd7ac7f1761f3c9d6a7100f68c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d24b03535e5eb82e025219c2f632b485409c898f",
        "lessThan": "e4a87abf588536d1cdfb128595e6e680af5cf3ed",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "8948e30de81faee87eeee01ef42a1f6008f5a83a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "4.19.312",
        "lessThan": "4.19.316",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.4.274",
        "lessThan": "5.4.278",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.10.215",
        "lessThan": "5.10.219",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.15.154",
        "lessThan": "5.15.161",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.85",
        "lessThan": "6.1.93",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.6.26",
        "lessThan": "6.6.33",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.8.5",
        "lessThan": "6.9",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "net/nfc/nci/core.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.9"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.9",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.316",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.278",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.219",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.161",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.93",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.4",
        "versionType": "semver",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/nfc/nci/core.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-38381

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#26604 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement