← CVE Intelligence

CVE-2023-53139

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a06347c04c13e380afce0c9816df51f00b83faf1 before ad11b872bc9b5d27e56183c6b01f9218c85395d2; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 98f49e693e02c1dafd5786be3468657840dd6f06; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 80be62358fa5507cefbaa067c7e6648401f2c3da; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 4357bbb921fe9e81d0fd9f70d669d1f177d8380e; affected a06347c04c13e380afce0c9816df51f00b83faf1 before ce93f1afc05941a572f5a69e2ed4012af905a693; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 27824b2f98818215adc9661e563252c48dab1a13; affected a06347c04c13e380afce0c9816df51f00b83faf1 before 11f180a5d62a51b484e9648f9b310e1bd50b1a57
Linux / Linuxaffected 4.4; unaffected 0 before 4.4; unaffected 4.14.310 through 4.14.*; unaffected 4.19.278 through 4.19.*; unaffected 5.4.237 through 5.4.*; unaffected 5.10.175 through 5.10.*; unaffected 5.15.103 through 5.15.*; unaffected 6.1.20 through 6.1.*; unaffected 6.2.7 through 6.2.*; unaffected 6.3 through *

CWE

No CWE identifiers supplied.

References