In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: Fix uninit-value in ncirxwork
syzbot reported the following uninit-value access issue [1]
ncirxwork() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38381.json",
"cna_assigner": "Linux"
}