CVE-2022-50656

CVE-2022-50656 is a Linux kernel vulnerability related to NFC (pn533). The issue is a slab-out-of-bounds read in nla_put() invoked by nfc_genl_send_target() when target->sensb_res_len is oversized due to the nfc_target not being properly initialized, leaving garbage values. The fixed workaroun...

PT-2023-33701 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the pn533 NFC component, where the nfc target is not properly cleared before being used. This could potentially lead to security vulnerabilities, although the actual...

PT-2022-33315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to use-after-free bugs caused by pn532 cmd timeout in the pn533 NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...