In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 4.4 | 4.14.310 |
| linux / linux_kernel | 4.15 | 4.19.278 |
| linux / linux_kernel | 4.20 | 5.4.237 |
| linux / linux_kernel | 5.5 | 5.10.175 |
| linux / linux_kernel | 5.11 | 5.15.103 |
| linux / linux_kernel | 5.16 | 6.1.20 |
| linux / linux_kernel | 6.2 | 6.2.7 |
| linux / linux_kernel | 6.3-rc1 | 6.3-rc1.x |