High · published February 27, 2025
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: Add bounds checking in nci_hci_create_pipe()
The "pipe" variable is a u8 which comes from the network. If it's more
than 127, then it results in memory corruption in the caller,
nci_hci_connect_gate().
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.4, < 6.1.129 | 6.1.129 |
| linux/linux_kernel | ≥ 6.2, < 6.6.78 | 6.6.78 |
| linux/linux_kernel | ≥ 6.7, < 6.12.14 | 6.12.14 |
| linux/linux_kernel | ≥ 6.13, < 6.13.3 | 6.13.3 |