CVE-2023-53139
kernel: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 2, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified