Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-21735

NFC: nci: Add bounds checking in nci_hci_create_pipe()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.78, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From a1b0b9415817c14d207921582f269d03f848b69f · fixed in bd249109d266f1d52548c46634a15b71656e0d44; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 674e17c5933779a8bf5c15d596fdfcb5ccdebbc2; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 10b3f947b609713e04022101f492d288a014ddfa; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in d5a461c315e5ff92657f84d8ba50caa5abf5c22a; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 172cdfc3a5ea20289c58fb73dadc6fd4a8784a4e; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 2ae4bade5a64d126bd18eb66bd419005c5550218; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 59c7ed20217c0939862fbf8145bc49d5b3a13f4f; From a1b0b9415817c14d207921582f269d03f848b69f · fixed in 110b43ef05342d5a11284cc8b21582b698b4ef1c

  • Linux Linux

    4.4

  • KernelLinux

    From 4.4.0 · fixed in 5.4.291; From 5.5.0 · fixed in 5.10.235; From 5.11.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.78; From 6.7.0 · fixed in 6.12.14; From 6.13.0 · fixed in 6.13.3

References 8

git.kernel.org