NetSight
high7.1

CVE-2023-52507

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determin…

Impact

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a shift-out-of-bounds and provide a clearer error for undefined protocols vs unsupported ones.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 4.14.328
from 4.15 before 4.19.297
from 4.20 before 5.4.259
from 5.5 before 5.10.199
from 5.11 before 5.15.136
from 5.16 before 6.1.59

Weakness classification

References