CVE-2025-38416: NFC: nci: uart: Set tty->disc_data only in success path
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: uart: Set tty->discdata only in success path
Setting tty->discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->discdata only on the success path, when opening of the NCI device and trymoduleget() succeeds.
The code differs in error path in one aspect: tty->discdata won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->discdata=NULL" in nciuartttyopen().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38416?
CVE-2025-38416 has been classified with a low severity level affecting the Linux kernel.
How do I fix CVE-2025-38416?
To fix CVE-2025-38416, update the Linux kernel to the latest stable version which includes the necessary patches.
What systems are affected by CVE-2025-38416?
CVE-2025-38416 affects specific versions of the Linux kernel that utilize the NFC component.
What is the nature of the vulnerability in CVE-2025-38416?
CVE-2025-38416 involves improper handling of the 'tty->disc_data' in the Linux NFC layer, leading to potential resource issues.
Is CVE-2025-38416 being actively exploited?
As of now, there are no reported cases of active exploitation for CVE-2025-38416.