In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: Fix uninit-value in ncirxwork
syzbot reported the following uninit-value access issue [1]
ncirxwork() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.
[
{
"digest": {
"length": 868.0,
"function_hash": "165698842879395068091630847463755689498"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-0e2610a3",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8c8e0d0d214c877fbad555df5b3ed558cd9b0c3",
"signature_type": "Function"
},
{
"digest": {
"length": 930.0,
"function_hash": "34603259951327088547155106150013808265"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-10d6bb09",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4a87abf588536d1cdfb128595e6e680af5cf3ed",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"210363542308354251954210561046618102335",
"293873941843489002047908518736627767643",
"23537960676146470849434069362262458041",
"148720786912919544690386310275404539843"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-1df37b65",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@406cfac9debd4a6d3dc5d9258ee086372a8c08b6",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"210363542308354251954210561046618102335",
"293873941843489002047908518736627767643",
"23537960676146470849434069362262458041",
"148720786912919544690386310275404539843"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-2b2b4678",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8c8e0d0d214c877fbad555df5b3ed558cd9b0c3",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"152237317875942367128254152576617120105",
"293873941843489002047908518736627767643",
"162395751952758035132042573112296161601",
"292713587178271702041702057929998293145"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-2e82fff4",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4a87abf588536d1cdfb128595e6e680af5cf3ed",
"signature_type": "Line"
},
{
"digest": {
"length": 868.0,
"function_hash": "165698842879395068091630847463755689498"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-392b68bc",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad4d196d2008c7f413167f0a693feb4f0439d7fe",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"210363542308354251954210561046618102335",
"293873941843489002047908518736627767643",
"23537960676146470849434069362262458041",
"148720786912919544690386310275404539843"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-442fb36c",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad4d196d2008c7f413167f0a693feb4f0439d7fe",
"signature_type": "Line"
},
{
"digest": {
"length": 930.0,
"function_hash": "34603259951327088547155106150013808265"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-462456e9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@017ff397624930fd7ac7f1761f3c9d6a7100f68c",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"210363542308354251954210561046618102335",
"293873941843489002047908518736627767643",
"23537960676146470849434069362262458041",
"148720786912919544690386310275404539843"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-7792acc9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@485ded868ed62ceb2acb3a459d7843fd71472619",
"signature_type": "Line"
},
{
"digest": {
"length": 868.0,
"function_hash": "165698842879395068091630847463755689498"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-a89fc48d",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@406cfac9debd4a6d3dc5d9258ee086372a8c08b6",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"139657653626073861951011251076486803985",
"256889548312553939506808793416324702751",
"99748310109691153597014194414054135888",
"152237317875942367128254152576617120105",
"293873941843489002047908518736627767643",
"162395751952758035132042573112296161601",
"292713587178271702041702057929998293145"
],
"threshold": 0.9
},
"target": {
"file": "net/nfc/nci/core.c"
},
"deprecated": false,
"id": "CVE-2024-38381-bb4ed663",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@017ff397624930fd7ac7f1761f3c9d6a7100f68c",
"signature_type": "Line"
},
{
"digest": {
"length": 868.0,
"function_hash": "165698842879395068091630847463755689498"
},
"target": {
"file": "net/nfc/nci/core.c",
"function": "nci_rx_work"
},
"deprecated": false,
"id": "CVE-2024-38381-f74c11cd",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@485ded868ed62ceb2acb3a459d7843fd71472619",
"signature_type": "Function"
}
]