NFC: digital: Fix Possible Memory Leak in digital_tg_listen_mdaa()
Summary
GSD-2021-1001901: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa(). Affects Kernel versions >= 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8, < 564249219e5b5673a8416b5181875d828c3f1e8c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC (Near Field Communication) functionality in the Linux Kernel allows devices to communicate wirelessly over short distances. The digital component of NFC handles the digital aspects of the communication. The digital_tg_listen_mdaa() function is responsible for listening to target devices in NFC digital mode. However, a potential memory leak has been identified in this function.
Vulnerability Detail
The vulnerability in digital_tg_listen_mdaa() can lead to a memory leak. A memory leak occurs when memory is allocated but not properly deallocated, resulting in a gradual loss of available memory. This can eventually lead to system instability or denial of service if the leaked memory is not reclaimed. The vulnerability was introduced in Linux Kernel version v3.13 and has been fixed in version v5.14.14.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the NFC digital component in the Linux Kernel has a vulnerability in the digital_tg_listen_mdaa() function that can lead to a memory leak. It is recommended to update the kernel to version v5.14.14 or later to fix this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a wireless communication technology that allows devices to exchange data over short distances.
digital_tg_listen_mdaa() is a function in the NFC digital component of the Linux Kernel that is responsible for listening to target devices in NFC digital mode.
A memory leak occurs when memory is allocated but not properly deallocated, leading to a gradual loss of available memory.
The memory leak caused by this vulnerability can result in system instability or denial of service if the leaked memory is not reclaimed.
To fix this vulnerability, update the Linux Kernel to version v5.14.14 or later, which includes the necessary fix for the memory leak in digital_tg_listen_mdaa().
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
