CVE-2022-26490
st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - cve@mitre.org
- Published
- 2022-03-06
- Last modified
- 2024-08-03
- Weaknesses
- CWE-120
Affected products
- Debian Linux (Debian)
- Fedora (Fedoraproject)
- Linux Kernel (Linux)
- H300e Firmware (Netapp)
- H300s Firmware (Netapp)
- H410c Firmware (Netapp)
- H410s Firmware (Netapp)
- H500e Firmware (Netapp)
- H500s Firmware (Netapp)
- H700e Firmware (Netapp)
- H700s Firmware (Netapp)
References
- https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BG4J46EMFPDD5QHYXDUI3P…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C5AUUDGSDLGYU7SZSK4PFA…
- https://security.netapp.com/advisory/ntap-20220429-0004/
- https://www.debian.org/security/2022/dsa-5127
- https://www.debian.org/security/2022/dsa-5173
