CVE-2022-48967

A flaw was found in the Linux kernel's Near Field Communication (NFC) Controller Interface (NCI) subsystem. A lack of proper bounds checking in the nci_add_new_protocol() function could allow a local attacker to perform a field-spanning write, leading to memory corruption. This vulnerability could result in privilege escalation or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.