Bugzilla – Bug 1219125
VUL-0: CVE-2023-46343: kernel: NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c
Last modified: 2024-04-08 06:50:25 UTC
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46343 https://www.cve.org/CVERecord?id=CVE-2023-46343 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7937609cd387246aed994e81aa4fa951358fba41 https://github.com/torvalds/linux/commit/7937609cd387246aed994e81aa4fa951358fba41 https://lore.kernel.org/netdev/20231013184129.18738-1-krzysztof.kozlowski%40linaro.org/T/#r38bdbaf8ae15305b77f6c5bc8e15d38f405623c7 https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9 https://bugzilla.redhat.com/show_bug.cgi?id=2259858
commit 7937609cd387246aed994e81aa4fa951358fba41 [v6.6-rc7~28^2~23] Author: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Date: Fri Oct 13 20:41:29 2023 +0200 nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference. Reported-by: 黄思聪 <huangsicong@iie.ac.cn> Fixes: 391d8a2da787 ("NFC: Add NCI over SPI receive") Cc: <stable@vger.kernel.org> Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org> Reviewed-by: Simon Horman <horms@kernel.org> Link: https://lore.kernel.org/r/20231013184129.18738-1-krzysztof.kozlowski@linaro.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>