CVE-2024-38381

Published Jun 21, 2024

Last updated 2 months ago

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.1
Impact score: 5.2
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-908

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6FEBAC1F-E636-4DB5-B5DC-5AA613FA8BCA",
            "versionEndExcluding": "6.19.316",
            "versionStartIncluding": "4.19.312"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EBA12E3E-3226-4BFE-80FA-CD00384BB4A8",
            "versionEndExcluding": "5.4.278",
            "versionStartIncluding": "5.4.274"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EFD9B2DB-0408-4028-A90E-3F67DBA2BE2E",
            "versionEndExcluding": "5.10.219",
            "versionStartIncluding": "5.10.215"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3873B618-2078-4018-8EE8-F39FEC6600A3",
            "versionEndExcluding": "5.15.161",
            "versionStartIncluding": "5.15.154"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "14DD8BC5-AB23-4D66-9B55-49AAEC715BE0",
            "versionEndExcluding": "6.1.93",
            "versionStartIncluding": "6.1.85"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D9039270-312D-4ADA-865A-BF010D3A4230",
            "versionEndExcluding": "6.6.33",
            "versionStartIncluding": "6.6.26"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BEF6A8C7-1C2F-4ED1-B8B2-57BEC82588F2",
            "versionEndExcluding": "6.9.4",
            "versionStartIncluding": "6.8.5"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

Weaknesses

Configurations

References