CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's NFC subsystem, specifically in the handling of responses from NFC-F devices, where an attacker can exploit a lack of bounds checking during a memory copy operation. This flaw allows a malicious NFC-F device to send an oversized response, potentially leading to a stack buffer overflow, which could compromise system stability or security. Organizations utilizing Linux systems with NFC capabilities should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF_RES response to overflow the stack-local struct nfc_target. Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy. Found by 0sec automated security-research tooling (https://0sec.ai).