Memory Leak Vulnerability in NFC: nci: fix memory leak in nci_allocate_device
Summary
UVI-2021-1000668: NFC: nci: fix memory leak in nci_allocate_device. Affects Kernel versions >= 11f54f228643d0248ec00ce8c9fb8d872f87e7b8, < 0365701bc44e078682ee1224866a71897495c7ef. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The NFC (Near Field Communication) package in the Linux Kernel is responsible for handling communication between devices in close proximity. It enables features such as contactless payments, file sharing, and device pairing. The nci_allocate_device function is a crucial part of the NFC subsystem, responsible for allocating memory for device initialization. However, a memory leak vulnerability has been discovered in this function, which can lead to the exhaustion of system resources over time.
Vulnerability Detail
The memory leak vulnerability in nci_allocate_device arises from a failure to release allocated memory when certain conditions are met. This can result in a gradual depletion of available memory, potentially leading to system instability or denial of service. Attackers may be able to exploit this vulnerability to exhaust system resources, causing a system crash or making it unresponsive. The vulnerability was introduced in version v4.0 of the Linux Kernel and has been fixed in version v4.19.193.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is essential to apply the recommended fix by updating the Linux Kernel to the patched version.
Conclusion
The memory leak vulnerability in NFC's nci_allocate_device function can have serious consequences, including system instability and denial of service. It is crucial to update the Linux Kernel to the patched version to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a short-range wireless communication technology that enables devices to exchange data when they are in close proximity. It is commonly used for contactless payments, file sharing, and device pairing.
nci_allocate_device is a function in the NFC subsystem of the Linux Kernel that is responsible for allocating memory for device initialization. It is a critical component for proper functioning of NFC-enabled devices.
A memory leak vulnerability occurs when a program or system fails to release allocated memory after it is no longer needed. This can lead to a gradual depletion of available memory, potentially causing system instability or denial of service.
The memory leak vulnerability in nci_allocate_device can result in the exhaustion of system resources over time. This can lead to system instability, crashes, or unresponsiveness. Attackers may be able to exploit this vulnerability to cause a denial of service.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.193 or later. This update includes the necessary fix for the memory leak issue in nci_allocate_device.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
