Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach the data access before the malformed packet is rejected. Validate the complete helper command length before stripping the NCI data header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 3194c6870158e305dac2af52f83681e9cb67280f before 842c0603cfa49530ef081f181a2ddbba77a37231; affected 3194c6870158e305dac2af52f83681e9cb67280f before e4b012240c8aaf57cec192234c24e0db5f531ffa; affected 3194c6870158e305dac2af52f83681e9cb67280f before f15ad9d6e9173a037587dded77c904fdae8df380; affected 3194c6870158e305dac2af52f83681e9cb67280f before a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9; affected 3194c6870158e305dac2af52f83681e9cb67280f before 4d4601e182c8567329be7d919669ec4d847ddd93; affected 3194c6870158e305dac2af52f83681e9cb67280f before ed2e00bb22c73156bf8030b6204deabb25cf4eb5; affected 3194c6870158e305dac2af52f83681e9cb67280f before 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c; affected 3194c6870158e305dac2af52f83681e9cb67280f before 686f942332b1667f13f3b8d6a2f50bcfbf42e277 |
| Linux / Linux | affected 4.4; unaffected 0 before 4.4; unaffected 5.10.271 through 5.10.*; unaffected 5.15.222 through 5.15.*; unaffected 6.1.189 through 6.1.*; unaffected 6.6.158 through 6.6.*; unaffected 6.12.112 through 6.12.*; unaffected 6.18.55 through 6.18.*; unaffected 7.2.9 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/842c0603cfa49530ef081f181a2ddbba77a37231
- https://git.kernel.org/stable/c/e4b012240c8aaf57cec192234c24e0db5f531ffa
- https://git.kernel.org/stable/c/f15ad9d6e9173a037587dded77c904fdae8df380
- https://git.kernel.org/stable/c/a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9
- https://git.kernel.org/stable/c/4d4601e182c8567329be7d919669ec4d847ddd93
- https://git.kernel.org/stable/c/ed2e00bb22c73156bf8030b6204deabb25cf4eb5
- https://git.kernel.org/stable/c/6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c
- https://git.kernel.org/stable/c/686f942332b1667f13f3b8d6a2f50bcfbf42e277