Skip to content
Sign in
8.8 High

CVE-2024-35915 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and…

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following uninit-value access issue [1][2]: nci_rx_work() parses and processes received packet. When the payload length is zero, each message type handler reads uninitialized payload and KMSAN detects this issue. The receipt of a packet with a zero-size payload is considered unexpected, and therefore, such packets should be silently discarded. This patch resolved this issue by checking payload size before calling each message type handler codes.

Affected products and versions

Product Affected versions Fixed in
Linux 6.9 earliest → < 6.9 6.9
Linux 6.8 earliest → < 6.8.5 6.8.5
Linux 6.6 earliest → < 6.6.26 6.6.26
Linux 6.1 earliest → < 6.1.85 6.1.85
Linux 5.15 earliest → < 5.15.154 5.15.154
Linux 5.10 earliest → < 5.10.215 5.10.215
Linux 5.4 earliest → < 5.4.274 5.4.274
Linux 4.19 earliest → < 4.19.312 4.19.312
Linux 3.2 No fix stated
Show the other branch
Product Affected versions Fixed in
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1.1 1.1.1

Other CVEs of Linux

The 18286 CVEs of Linux →
CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics Not rated CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free() Not rated CVE-2026-100080 xen-netback: Fix UAF when reading statistics data Not rated CVE-2026-99270 tcp: Fix potential UAF in reqsk_timer_handler(). 8.1 High
Track this CVE