2385 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988790)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988790 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100sendcomplete Syzbot reported UAF in port100sendcomplet...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989649)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989649 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989231)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989231 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails then...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989225)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989225 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990093)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990093 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in the successful path. Setting tty-discdata before opening the NCI device means that we need to clean up the state in error paths. This also opens a short window during operation—if the devi...
EUVD-2025-37031
The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...
CVE-2025-11998 HP Card Readers (B Models) – Potential Information Disclosure
The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...
PT-2025-44422
Name of the Vulnerable Software and Affected Versions HP Card Readers B Models X3D03B & Y7C05B Description HP Card Readers B Models X3D03B and Y7C05B may disclose information, potentially allowing a prior user’s identity to be inherited. This can occur when a Near Field Communication NFC device,...
net: nfc: nci: Add parameter validation for packet data
...
SUSE CVE-2025-40043
In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...
CVE-2025-40043
CVE-2025-40043 relates to a Linux kernel issue in net: nfc: nci where input validation was insufficient in handling packet data. Syzbot found an uninitialized value bug in nci_init_req caused by limited validation in nic_valid_size(), which compared skb->len (user-provided size) to the buffer’...
CVE-2025-40043 net: nfc: nci: Add parameter validation for packet data
In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...
Linux Distros Unpatched Vulnerability : CVE-2025-40043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7...
Siemens SIMATIC Devices Out-of-bounds Write (CVE-2025-21735)
NFC: nci: Add bounds checking in ncihcicreatepipe This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503411; scriptversion"1.2";...
EUVD-2019-18611
Malware in sbrugna...
EUVD-2020-1784
Malware in sbrugna...
EUVD-2015-7934
Malware in sbrugna...