CVE-2023-52507

nfc: nci: assert requested protocol is valid

State: Published
Severity: Not scored
Published: Mar 2, 2024
Updated: May 11, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: nci: assert requested protocol is valid

The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a shift-out-of-bounds and provide a clearer error for undefined protocols vs unsupported ones.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 2c231a247a1d1628e41fa1eefd1a5307c41c5f53Affected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before a686f84101680b8442181a8846fbd3c934653729Affected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 95733ea130e35ef9ec5949a5908dde3feaba92cbAffected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before a424807d860ba816aaafc3064b46b456361c0802Affected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 25dd54b95abfdca423b65a4ee620a774777d8213Affected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 853dda54ba59ea70d5580a298b7ede4707826848Affected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 6584eba7688dcf999542778b07f63828c21521daAffected 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 354a6e707e29cb0c007176ee5b8db8be7bd2dee0Affected
LinuxLinux	3.2Affected before 3.2Not affected 4.14.328 through 4.14.Not affected 4.19.297 through 4.19.Not affected 5.4.259 through 5.4.Not affected 5.10.199 through 5.10.Not affected 5.15.136 through 5.15.Not affected 6.1.59 through 6.1.Not affected 6.5.8 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 2c231a247a1d1628e41fa1eefd1a5307c41c5f53Affected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before a686f84101680b8442181a8846fbd3c934653729Affected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 95733ea130e35ef9ec5949a5908dde3feaba92cbAffected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before a424807d860ba816aaafc3064b46b456361c0802Affected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 25dd54b95abfdca423b65a4ee620a774777d8213Affected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 853dda54ba59ea70d5580a298b7ede4707826848Affected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 6584eba7688dcf999542778b07f63828c21521daAffected
6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 354a6e707e29cb0c007176ee5b8db8be7bd2dee0Affected

LinuxLinux

3.2Affected
before 3.2Not affected
4.14.328 through 4.14.*Not affected
4.19.297 through 4.19.*Not affected
5.4.259 through 5.4.*Not affected
5.10.199 through 5.10.*Not affected
5.15.136 through 5.15.*Not affected
6.1.59 through 6.1.*Not affected
6.5.8 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.