GSD-2022-1003509 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling

nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003430 NFC: NULL out the dev->rfkill to prevent UAF

NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003250 nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION

nfc: st21nfca: fix incorrect sizing calculations in EVTTRANSACTION This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003246 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling

nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003147 NFC: NULL out the dev->rfkill to prevent UAF

NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002931 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling

nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002927 nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION

nfc: st21nfca: fix incorrect sizing calculations in EVTTRANSACTION This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002795 NFC: NULL out the dev->rfkill to prevent UAF

NFC: NULL out the dev-rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002582 nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION

nfc: st21nfca: fix incorrect sizing calculations in EVTTRANSACTION This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002576 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling

nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.0 through 5.10.121 Description The issue is related to memory leaks in EVT TRANSACTION handling in the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32056

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.162 through 5.4.197 Description The issue is related to a potential security vulnerability in the NFC component of the Linux Kernel. It involves a use-after-free UAF scenario that could be exploited. The actual impact...

PT-2022-32105

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.0 through v4.19.246 Description The issue is related to memory leaks in EVT TRANSACTION handling in the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31509

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to memory leaks in EVT TRANSACTION handling in the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to a potential use-after-free UAF vulnerability in the NFC component. It is noted that the actual impact and attack plausibility have not yet been proven. The vulnerabili...

PT-2022-32217

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to memory leaks in EVT TRANSACTION handling in the st21nfca NFC driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32283

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a potential use-after-free UAF vulnerability in the NFC component. The problem arises from not properly nulling out the dev-rfkill, which could lead to security issue...

PT-2022-31906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a potential security vulnerability in the NFC component, where the dev-rfkill is not properly NULLed out, which could lead to a use-after-free UAF condition. The actu...

Google Android out-of-bounds read vulnerability (CNVD-2022-53371)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an out-of-bounds read vulnerability, which stems from a lack of boundary checking and can result in an out-of-bounds read, which can be exploited by an attacker to cause local information leakage of...

PT-2022-32187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a potential use-after-free UAF vulnerability in the NFC component. The problem arises from not properly nulling out the dev-rfkill, which could lead to security issue...