CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's NFC microread functionality, specifically in the microread_target_discovered() function, which improperly validates the lengths of target discovery payloads. This oversight could lead to buffer overflows or memory corruption, potentially allowing an attacker to execute arbitrary code or crash the system. Organizations using Linux systems with NFC capabilities should prioritize addressing this issue to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length. Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.