In the Linux kernel, the following vulnerability has been...
Unreviewed
Published
Jul 30, 2024
to the GitHub Advisory Database
•
Updated Jul 30, 2024
Description
Published by the National Vulnerability Database
Jul 30, 2024
Published to the GitHub Advisory Database
Jul 30, 2024
Last updated
Jul 30, 2024
In the Linux kernel, the following vulnerability has been resolved:
nfc/nci: Add the inconsistency check between the input data length and count
write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="610501"], 0xf)
Syzbot constructed a write() call with a data length of 3 bytes but a count value
of 15, which passed too little data to meet the basic requirements of the function
nci_rf_intf_activated_ntf_packet().
Therefore, increasing the comparison between data length and count value to avoid
problems caused by inconsistent data length and count.
References