Uninitialized Value Access in Linux Kernel's NFC NCI Module
Summary
CVE-2024-38381: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx... Affects linux versions < 5.10.221-1. Fixed in 5.10.221-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management, process scheduling, and system calls. The kernel supports various functionalities, including networking, file systems, and device drivers. The NFC (Near Field Communication) subsystem allows devices to communicate wirelessly over short distances. The vulnerability in question affects the NFC NCI (NFC Controller Interface) module, which is responsible for handling NFC communication. This vulnerability can lead to potential security risks if uninitialized values are accessed during packet processing.
Vulnerability Detail
In the Linux kernel, specifically within the NFC NCI module, an uninitialized value access vulnerability has been identified. This issue arises in the nci_rx_work() function, which processes received packets from the device's receive queue. If the header size, payload size, or total packet size is not validated before processing, it can lead to undefined behavior. The vulnerability was reported by syzbot and poses a risk of data corruption or system instability, as invalid packets may not be handled correctly.
How To Fix
Minimum fixed version
5.10.221-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can implement input validation checks in their applications that utilize the NFC NCI module to ensure that only valid packets are processed. This may involve checking the packet size and format before passing it to the nci_rx_work() function.
Conclusion
The CVE-2024-38381 vulnerability in the Linux kernel's NFC NCI module poses significant risks due to uninitialized value access. Users are strongly advised to update their kernel to the latest versions to mitigate these risks. Additionally, implementing input validation can serve as a temporary workaround until the system is updated.
See every vulnerability recorded for linux →
FAQ
CVE-2024-38381 is a vulnerability in the Linux kernel's NFC NCI module that allows for uninitialized value access, potentially leading to data corruption or system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
If exploited, this vulnerability could lead to undefined behavior in the system, including data corruption and potential crashes.
Yes, the permanent fix is to update your Linux kernel to the specified versions that address this vulnerability.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.