Memory Leak in NFC: nci_allocate_device
Summary
GSD-2021-1000684: NFC: nci: fix memory leak in nci_allocate_device. Affects Kernel versions >= 11f54f228643d0248ec00ce8c9fb8d872f87e7b8, < 2c2fb2df46ea866b49fea5ec7112ec3cd4896c74. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC (Near Field Communication) functionality in the Linux Kernel allows devices to communicate wirelessly over short distances. The nci_allocate_device function is responsible for allocating memory for an NFC device. However, a memory leak vulnerability has been identified in this function, which could lead to the exhaustion of system resources over time.
Vulnerability Detail
The memory leak vulnerability in nci_allocate_device arises from a failure to release allocated memory under certain conditions. An attacker could exploit this vulnerability by repeatedly allocating memory for NFC devices, causing system resources to be depleted and potentially leading to a denial-of-service (DoS) scenario. The impact of this vulnerability may vary depending on the availability of system resources and the attacker's ability to trigger the vulnerable code path.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel.
Conclusion
The memory leak vulnerability in NFC's nci_allocate_device function can result in the exhaustion of system resources over time, potentially leading to a denial-of-service scenario. It is crucial to update the Linux Kernel to the recommended version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a short-range wireless communication technology that enables devices to exchange data over a distance of a few centimeters.
nci_allocate_device is a function in the Linux Kernel responsible for allocating memory for NFC devices.
A memory leak occurs when allocated memory is not properly released, leading to a gradual depletion of available system resources.
The impact of this vulnerability can vary depending on the availability of system resources and the attacker's ability to trigger the vulnerable code path. It could potentially lead to a denial-of-service (DoS) scenario.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.14.235 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
