In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | < 10.0.17763.2452 |
| Linux | Linux | < * |
| Linux | Linux | <= Release 3DEXPERIENCE R2022x.FP.CFA.2337 |
| Linux | Linux | 6.9 |