CVE-2023-52507

nfc: nci: assert requested protocol is valid

HIGH

7.1

CVSS Score

Published: March 2, 2024 at 09:52 PM UTC

Updated: June 17, 2026 at 06:42 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a shift-out-of-bounds and provide a clearer error for undefined protocols vs unsupported ones.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.2 ≤ v < 4.14.3283.2 ≤ v < 4.19.2973.2 ≤ v < 5.10.1993.2 ≤ v < 5.15.1363.2 ≤ v < 5.4.2593.2 ≤ v < 6.1.593.2 ≤ v < 6.5.83.2 ≤ v < 6.64.15 ≤ v < 4.19.2974.20 ≤ v < 5.4.2595.11 ≤ v < 5.15.1365.16 ≤ v < 6.1.595.5 ≤ v < 5.10.1996.2 ≤ v < 6.5.86.6 rc1 6.6 rc2 6.6 rc3 6.6 rc4 6.6 rc56a2968aaf50c7a22fced77a5e24aa636281efca8

Vendor states this is fixed in 25dd54b95abfdca423b65a4ee620a774777d8213 (fixed)

Vendor states this is fixed in 2c231a247a1d1628e41fa1eefd1a5307c41c5f53 (fixed)

Vendor states this is fixed in 354a6e707e29cb0c007176ee5b8db8be7bd2dee0 (fixed)

Vendor states this is fixed in 6584eba7688dcf999542778b07f63828c21521da (fixed)

Vendor states this is fixed in 853dda54ba59ea70d5580a298b7ede4707826848 (fixed)

Vendor states this is fixed in 95733ea130e35ef9ec5949a5908dde3feaba92cb (fixed)

Vendor states this is fixed in a424807d860ba816aaafc3064b46b456361c0802 (fixed)

Vendor states this is fixed in a686f84101680b8442181a8846fbd3c934653729 (fixed)

Vendor states this is fixed in 3.2 (unaffected)

Vendor states this is fixed in 4.14.328 (unaffected)

Vendor states this is fixed in 4.19.297 (unaffected)

Vendor states this is fixed in 5.10.199 (unaffected)