CVE-2023-52919

MEDIUM

Linux Kernel 3.11-4.14.328 - NULL Pointer Dereference in NFC NCI send_acknowledge

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 10.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (20)
Linux/Linux < 3.11
Linux/Linux 3.11
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - 2b2edf089df3a69f0072c6e71563394c5a94e62e
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - 5622592f8f74ae3e594379af02e64ea84772d0dd
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - 76050b0cc5a72e0c7493287b7e18e1cb9e3c4612
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - 7937609cd387246aed994e81aa4fa951358fba41
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - bb6cacc439ddd2cd51227ab193f4f91cfc7f014f
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - c95fa5b20fe03609e0894656fa43c18045b5097e
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - d7dbdbe3800a908eecd4975c31be47dd45e2104a
Linux/Linux 391d8a2da787257aeaf952c974405b53926e3fb3 - ffdc881f68073ff86bf21afb9bb954812e8278be
... and 10 more
Published Oct 22, 2024
Tracked Since Feb 18, 2026