CVE-2023-52919: nfc: nci: fix possible NULL pointer dereference in send_acknowledge()

CVE-2023-52919 PUBLISHED

nfc: nci: fix possible NULL pointer dereference in send_acknowledge()

Reported by linux · Published October 22, 2024

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
Linux	Linux	ffdc881f68073ff86bf21afb9bb954812e8278be, d7dbdbe3800a908eecd4975c31be47dd45e2104a, c95fa5b20fe03609e0894656fa43c18045b5097e, bb6cacc439ddd2cd51227ab193f4f91cfc7f014f, 7937609cd387246aed994e81aa4fa951358fba41, 76050b0cc5a72e0c7493287b7e18e1cb9e3c4612, 5622592f8f74ae3e594379af02e64ea84772d0dd, 2b2edf089df3a69f0072c6e71563394c5a94e62e

Affected products

Vendor	Product	Versions
Linux	Linux	391d8a2da787257aeaf952c974405b53926e3fb3, 391d8a2da787257aeaf952c974405b53926e3fb3, 391d8a2da787257aeaf952c974405b53926e3fb3
Linux	Linux	3.11, 0, 4.14.328
Linux	Linux	391d8a2da787257aeaf952c974405b53926e3fb3, 4.14.328, 4.19.297
linux	linux_kernel	3.11, 3.11, 3.11

Timeline

Oct 21, 2024 CVE Published
Oct 22, 2024 Coalition ESS Score (8 in total, the first dated here)
Oct 23, 2024 EPSS Score (30 in total, the first dated here)
Oct 24, 2024 CVE Updated
Jan 25, 2026 Security Advisory (403 in total, the first dated here)
Oct 19, 2026 Distribution Patch (338 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-52919
vulnetix vdb fixes CVE-2023-52919

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-52919/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →