In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: assert requested protocol is valid
The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a shift-out-of-bounds and provide a clearer error for undefined protocols vs unsupported ones.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-mediatek | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-genericUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-262-lowlatency | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub