CVE-2024-35915: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: Fix uninit-value in ncidevup and ncintfpacket
syzbot reported the following uninit-value access issue [1][2]:
ncirxwork() parses and processes received packet. When the payload length is zero, each message type handler reads uninitialized payload and KMSAN detects this issue. The receipt of a packet with a zero-size payload is considered unexpected, and therefore, such packets should be silently discarded.
This patch resolved this issue by checking payload size before calling each message type handler codes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35915?
CVE-2024-35915 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-35915?
To remediate CVE-2024-35915, update to the patched versions of the Linux kernel, including 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What types of systems are affected by CVE-2024-35915?
CVE-2024-35915 affects systems running specific versions of the Linux kernel, particularly those listed in the vulnerability's details.
What is the nature of the vulnerability in CVE-2024-35915?
CVE-2024-35915 involves an uninitialized value access issue in the NFC subsystem of the Linux kernel that can occur when processing received packets.
Can CVE-2024-35915 lead to potential exploits?
Yes, if exploited, CVE-2024-35915 could potentially allow unauthorized access or manipulation of the NFC functionality within affected systems.