CVE-2023-53139
published 2025-05-02CVE-2023-53139: In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause
out-of-bounds write in device_property_read_u8_array later.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < ad11b872bc9b5d27e56183c6b01f9218c85395d2 | ad11b872bc9b5d27e56183c6b01f9218c85395d2 |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 98f49e693e02c1dafd5786be3468657840dd6f06 | 98f49e693e02c1dafd5786be3468657840dd6f06 |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08 | 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08 |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 80be62358fa5507cefbaa067c7e6648401f2c3da | 80be62358fa5507cefbaa067c7e6648401f2c3da |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 4357bbb921fe9e81d0fd9f70d669d1f177d8380e | 4357bbb921fe9e81d0fd9f70d669d1f177d8380e |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < ce93f1afc05941a572f5a69e2ed4012af905a693 | ce93f1afc05941a572f5a69e2ed4012af905a693 |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 27824b2f98818215adc9661e563252c48dab1a13 | 27824b2f98818215adc9661e563252c48dab1a13 |
| linux | linux | >= a06347c04c13e380afce0c9816df51f00b83faf1 < 11f180a5d62a51b484e9648f9b310e1bd50b1a57 | 11f180a5d62a51b484e9648f9b310e1bd50b1a57 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.15 < 4.19.278 | 4.19.278 |
| linux | linux_kernel | >= 4.20 < 5.4.237 | 5.4.237 |
| linux | linux_kernel | >= 4.4 < 4.14.310 | 4.14.310 |
| linux | linux_kernel | >= 5.11 < 5.15.103 | 5.15.103 |
| linux | linux_kernel | >= 5.16 < 6.1.20 | 6.1.20 |
| linux | linux_kernel | >= 5.5 < 5.10.175 | 5.10.175 |
| linux | linux_kernel | >= 6.2 < 6.2.7 | 6.2.7 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53139 [MEDIUM] kernel: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
kernel: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause
out-of-bounds write in device_property_read_u8_array later.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not af
Debian
CVE-2023-53139: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: a...
vendor_debian·2023·CVSS 5.5
CVE-2023-53139 [MEDIUM] CVE-2023-53139: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: a...
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
GHSA
GHSA-8xh6-jjv8-fgw6: In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_propert
ghsa_unreviewed·2025-05-02
CVE-2023-53139 [MEDIUM] CWE-476 GHSA-8xh6-jjv8-fgw6: In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_propert
In the Linux kernel, the following vulnerability has been resolved:
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause
out-of-bounds write in device_property_read_u8_array later.
OSV
CVE-2023-53139: In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properti
osv·2025-05-02·CVSS 5.5
CVE-2023-53139 [MEDIUM] CVE-2023-53139: In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properti
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0a3664a1058d4b2b1ea2112cc275ca47fba7fc08https://git.kernel.org/stable/c/11f180a5d62a51b484e9648f9b310e1bd50b1a57https://git.kernel.org/stable/c/27824b2f98818215adc9661e563252c48dab1a13https://git.kernel.org/stable/c/4357bbb921fe9e81d0fd9f70d669d1f177d8380ehttps://git.kernel.org/stable/c/80be62358fa5507cefbaa067c7e6648401f2c3dahttps://git.kernel.org/stable/c/98f49e693e02c1dafd5786be3468657840dd6f06https://git.kernel.org/stable/c/ad11b872bc9b5d27e56183c6b01f9218c85395d2https://git.kernel.org/stable/c/ce93f1afc05941a572f5a69e2ed4012af905a693
2025-05-02
Published