CVE-2023-53139

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

published May 2, 2025

CVSS
—
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause

out-of-bounds write in device_property_read_u8_array later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.0th percentile
Published
2025-05-02T15:56Z
EPSS history
Timeline
  • 02 MAY 15:56Z
    nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
    cvelistv5