Aller au contenu
8.8 Élevée

CVE-2024-38381 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot…

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.10 premières → < 6.10 6.10
Linux 6.9 6.9.4
Linux 6.6 premières → < 6.6.33 6.6.33
Linux 6.1 premières → < 6.1.93 6.1.93
Linux 5.15 premières → < 5.15.161 5.15.161
Linux 5.10 premières → < 5.10.219 5.10.219
Linux 5.4 premières → < 5.4.278 5.4.278
Linux 4.19 premières → < 4.19.316 4.19.316
RUGGEDCOM RST2428P 3.1 premières → < 3.1 3.1
Afficher les 3 autres branches
Produit Versions touchées Corrigé en
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family Versions non publiées
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 premières → < 3.1 3.1
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 premières → < 1.1.1 1.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 18283 CVE de Linux →
Suivre cette CVE