NetSight
IP …
high7.8

CVE-2022-26490

st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted…

Impact

st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.309
from 4.10 before 4.14.274
from 4.15 before 4.19.237
from 4.20 before 5.4.188
from 5.5 before 5.10.109
from 5.11 before 5.15.32
FedoraprojectFedora
Versions 34, 35
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
DebianDebian Linux
Versions 9.0, 10.0

Weakness classification

CWE-120

References