CVE-2023-52919

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52919
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2b2edf089df3a69f0072c6e71563394c5a94e62e Patch
https://git.kernel.org/stable/c/5622592f8f74ae3e594379af02e64ea84772d0dd Patch
https://git.kernel.org/stable/c/76050b0cc5a72e0c7493287b7e18e1cb9e3c4612 Patch
https://git.kernel.org/stable/c/7937609cd387246aed994e81aa4fa951358fba41 Patch
https://git.kernel.org/stable/c/bb6cacc439ddd2cd51227ab193f4f91cfc7f014f Patch
https://git.kernel.org/stable/c/c95fa5b20fe03609e0894656fa43c18045b5097e Patch
https://git.kernel.org/stable/c/d7dbdbe3800a908eecd4975c31be47dd45e2104a Patch
https://git.kernel.org/stable/c/ffdc881f68073ff86bf21afb9bb954812e8278be Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*
History

24 Oct 2024, 03:53

Type Values Removed Values Added
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/2b2edf089df3a69f0072c6e71563394c5a94e62e - () https://git.kernel.org/stable/c/2b2edf089df3a69f0072c6e71563394c5a94e62e - Patch
References () https://git.kernel.org/stable/c/5622592f8f74ae3e594379af02e64ea84772d0dd - () https://git.kernel.org/stable/c/5622592f8f74ae3e594379af02e64ea84772d0dd - Patch
References () https://git.kernel.org/stable/c/76050b0cc5a72e0c7493287b7e18e1cb9e3c4612 - () https://git.kernel.org/stable/c/76050b0cc5a72e0c7493287b7e18e1cb9e3c4612 - Patch
References () https://git.kernel.org/stable/c/7937609cd387246aed994e81aa4fa951358fba41 - () https://git.kernel.org/stable/c/7937609cd387246aed994e81aa4fa951358fba41 - Patch
References () https://git.kernel.org/stable/c/bb6cacc439ddd2cd51227ab193f4f91cfc7f014f - () https://git.kernel.org/stable/c/bb6cacc439ddd2cd51227ab193f4f91cfc7f014f - Patch
References () https://git.kernel.org/stable/c/c95fa5b20fe03609e0894656fa43c18045b5097e - () https://git.kernel.org/stable/c/c95fa5b20fe03609e0894656fa43c18045b5097e - Patch
References () https://git.kernel.org/stable/c/d7dbdbe3800a908eecd4975c31be47dd45e2104a - () https://git.kernel.org/stable/c/d7dbdbe3800a908eecd4975c31be47dd45e2104a - Patch
References () https://git.kernel.org/stable/c/ffdc881f68073ff86bf21afb9bb954812e8278be - () https://git.kernel.org/stable/c/ffdc881f68073ff86bf21afb9bb954812e8278be - Patch

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nfc: nci: corrige posible desreferencia de puntero NULL en send_acknowledge() Manejar el error de asignación de memoria de nci_skb_alloc() (llamando a alloc_skb()) para evitar una posible desreferencia de puntero NULL.

22 Oct 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-22 08:15

Updated : 2024-10-24 03:53

NVD link : CVE-2023-52919

Mitre link : CVE-2023-52919

CVE.ORG link : CVE-2023-52919

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference