CVE-2025-38416

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38416
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38416.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38416
Downstream
Related
Published
2025-07-25T14:15:33Z
Modified
2025-08-12T21:01:39Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

NFC: nci: uart: Set tty->disc_data only in success path

Setting tty->discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->discdata only on the success path, when opening of the NCI device and trymoduleget() succeeds.

The code differs in error path in one aspect: tty->discdata won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->discdata=NULL" in nciuarttty_open().

References

Affected packages