In the Linux kernel, the following vulnerability has been resolved:
nfc/nci: Add the inconsistency check between the input data length and count
write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="610501"], 0xf)
Syzbot constructed a write() call with a data length of 3 bytes but a count value of 15, which passed too little data to meet the basic requirements of the function ncirfintfactivatedntf_packet().
Therefore, increasing the comparison between data length and count value to avoid problems caused by inconsistent data length and count.
[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-42130-221cfb53",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@056478b4321b36ca33567089d39ac992f6c9c37a",
"digest": {
"length": 368.0,
"function_hash": "170995889384625296243270535000176694904"
},
"signature_version": "v1",
"target": {
"function": "virtual_ncidev_write",
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-42130-5f659c26",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41f5e2840cd0629f049ce5ce2f8dd10a8299de42",
"digest": {
"length": 323.0,
"function_hash": "305147350825119629933037886991151762633"
},
"signature_version": "v1",
"target": {
"function": "virtual_ncidev_write",
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-42130-75db73ef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@068648aab72c9ba7b0597354ef4d81ffaac7b979",
"digest": {
"length": 368.0,
"function_hash": "170995889384625296243270535000176694904"
},
"signature_version": "v1",
"target": {
"function": "virtual_ncidev_write",
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-42130-8b604444",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f07bcd8bba803c9e6ad2048543185d6c56587a2f",
"digest": {
"length": 323.0,
"function_hash": "305147350825119629933037886991151762633"
},
"signature_version": "v1",
"target": {
"function": "virtual_ncidev_write",
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-42130-a7f4cac8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22a72c1c10f43ca645a98725e0faff34592f4d08",
"digest": {
"line_hashes": [
"196837562486985257503234932214883770598",
"224964313891964428525443776196778303848",
"337549825402429050587467188673218036835",
"68183996006058375351835201607533516673"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-42130-d67bb370",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22a72c1c10f43ca645a98725e0faff34592f4d08",
"digest": {
"length": 368.0,
"function_hash": "170995889384625296243270535000176694904"
},
"signature_version": "v1",
"target": {
"function": "virtual_ncidev_write",
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-42130-d816bdb7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@068648aab72c9ba7b0597354ef4d81ffaac7b979",
"digest": {
"line_hashes": [
"196837562486985257503234932214883770598",
"224964313891964428525443776196778303848",
"337549825402429050587467188673218036835",
"68183996006058375351835201607533516673"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-42130-e8ebd167",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f07bcd8bba803c9e6ad2048543185d6c56587a2f",
"digest": {
"line_hashes": [
"196837562486985257503234932214883770598",
"259488312267644863094712988586095117956",
"189674108653395254432373647499270566092",
"83552015456127837444954772760821583981"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-42130-f5cae3a9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@056478b4321b36ca33567089d39ac992f6c9c37a",
"digest": {
"line_hashes": [
"196837562486985257503234932214883770598",
"224964313891964428525443776196778303848",
"337549825402429050587467188673218036835",
"68183996006058375351835201607533516673"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/nfc/virtual_ncidev.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-42130-fca99be6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41f5e2840cd0629f049ce5ce2f8dd10a8299de42",
"digest": {
"line_hashes": [
"196837562486985257503234932214883770598",
"259488312267644863094712988586095117956",
"189674108653395254432373647499270566092",
"83552015456127837444954772760821583981"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/nfc/virtual_ncidev.c"
}
}
]