Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-35915
HistoryMay 19, 2024 - 9:15 a.m.

CVE-2024-35915

2024-05-1909:15:11
Debian Security Bug Tracker
security-tracker.debian.org
3
linux kernel
vulnerability
resolved

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following uninit-value access issue [1][2]: nci_rx_work() parses and processes received packet. When the payload length is zero, each message type handler reads uninitialized payload and KMSAN detects this issue. The receipt of a packet with a zero-size payload is considered unexpected, and therefore, such packets should be silently discarded. This patch resolved this issue by checking payload size before calling each message type handler codes.

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%