13 matches found
CVE-2026-31622
In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-collision cascade in digitalinrecvsddres appends 3 or 4 bytes to target-nfcid1 on each round, but the number of cascade rounds is controlled...
CVE-2026-31622
In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-collision cascade in digitalinrecvsddres appends 3 or 4 bytes to target-nfcid1 on each round, but the number of cascade rounds is controlled...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013745 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput...
DEBIAN-CVE-2022-50656
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...
CVE-2022-50656
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...
UBUNTU-CVE-2022-50656
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...
CVE-2022-50656
CVE-2022-50656 is a Linux kernel vulnerability related to NFC (pn533). The issue is a slab-out-of-bounds read in nla_put() invoked by nfc_genl_send_target() when target->sensb_res_len is oversized due to the nfc_target not being properly initialized, leaving garbage values. The fixed workaroun...
PT-2023-34654
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns the pn533 NFC component in the Linux Kernel, where the nfc target is not properly cleared before being used. This could potentially lead to security vulnerabilities, althou...
PT-2023-33348 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: The issue concerns a bounds check in the nci struct nfc target arrays. It was introduced in version v3.4 and fixed in Linux Kernel version v5.4.227. The actual impact and attack plausibilit...
PT-2023-34442
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the pn533 NFC component, where the nfc target is not properly cleared before being used. This could potentially lead to security vulnerabilities, although the actual...
PT-2023-33395
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.269 Description The issue concerns a bounds check in the nci struct nfc target arrays. It was introduced in version v3.4 and fixed in version v4.19.269. The actual impact and attack plausibility have not ye...
PT-2023-34120
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the pn533 NFC component, where the nfc target is not properly cleared before being used. This could potentially lead to security vulnerabilities, although the actual...
PT-2023-33205 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a bounds check in the nci struct nfc target arrays. It was introduced in version v3.4 and fixed in version v5.15.83. The actual impact and attack plausibility have not ye...