Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53139

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a06347c04c13e380afce0c9816df51f00b83faf1 to < ad11b872bc9b5d27e56183c6b01f9218c85395d2affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 98f49e693e02c1dafd5786be3468657840dd6f06affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 80be62358fa5507cefbaa067c7e6648401f2c3daaffected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 4357bbb921fe9e81d0fd9f70d669d1f177d8380eaffected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < ce93f1afc05941a572f5a69e2ed4012af905a693affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 27824b2f98818215adc9661e563252c48dab1a13affected
  • a06347c04c13e380afce0c9816df51f00b83faf1 to < 11f180a5d62a51b484e9648f9b310e1bd50b1a57affected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 4.14.310 to ≤ 4.14.*unaffected
  • 4.19.278 to ≤ 4.19.*unaffected
  • 5.4.237 to ≤ 5.4.*unaffected
  • 5.10.175 to ≤ 5.10.*unaffected
  • 5.15.103 to ≤ 5.15.*unaffected
  • 6.1.20 to ≤ 6.1.*unaffected
  • 6.2.7 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References