CVE-2023-53139

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

State: Published
Severity: Not scored
Published: May 2, 2025
Updated: May 11, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a06347c04c13e380afce0c9816df51f00b83faf1 to before ad11b872bc9b5d27e56183c6b01f9218c85395d2Affected a06347c04c13e380afce0c9816df51f00b83faf1 to before 98f49e693e02c1dafd5786be3468657840dd6f06Affected a06347c04c13e380afce0c9816df51f00b83faf1 to before 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08Affected a06347c04c13e380afce0c9816df51f00b83faf1 to before 80be62358fa5507cefbaa067c7e6648401f2c3daAffected a06347c04c13e380afce0c9816df51f00b83faf1 to before 4357bbb921fe9e81d0fd9f70d669d1f177d8380eAffected a06347c04c13e380afce0c9816df51f00b83faf1 to before ce93f1afc05941a572f5a69e2ed4012af905a693Affected a06347c04c13e380afce0c9816df51f00b83faf1 to before 27824b2f98818215adc9661e563252c48dab1a13Affected a06347c04c13e380afce0c9816df51f00b83faf1 to before 11f180a5d62a51b484e9648f9b310e1bd50b1a57Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.14.310 through 4.14.Not affected 4.19.278 through 4.19.Not affected 5.4.237 through 5.4.Not affected 5.10.175 through 5.10.Not affected 5.15.103 through 5.15.Not affected 6.1.20 through 6.1.Not affected 6.2.7 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

a06347c04c13e380afce0c9816df51f00b83faf1 to before ad11b872bc9b5d27e56183c6b01f9218c85395d2Affected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 98f49e693e02c1dafd5786be3468657840dd6f06Affected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08Affected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 80be62358fa5507cefbaa067c7e6648401f2c3daAffected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 4357bbb921fe9e81d0fd9f70d669d1f177d8380eAffected
a06347c04c13e380afce0c9816df51f00b83faf1 to before ce93f1afc05941a572f5a69e2ed4012af905a693Affected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 27824b2f98818215adc9661e563252c48dab1a13Affected
a06347c04c13e380afce0c9816df51f00b83faf1 to before 11f180a5d62a51b484e9648f9b310e1bd50b1a57Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.14.310 through 4.14.*Not affected
4.19.278 through 4.19.*Not affected
5.4.237 through 5.4.*Not affected
5.10.175 through 5.10.*Not affected
5.15.103 through 5.15.*Not affected
6.1.20 through 6.1.*Not affected
6.2.7 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.