What’s Vulnerable › Vulnerabilities

CVE-2023-52919: nfc: nci: fix possible NULL pointer dereference in send_acknowledge()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-22 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.

Affected products

• Linux kernel: from 3.11 before 4.14.328; from 4.15 before 4.19.297; from 4.20 before 5.4.259; from 5.5 before 5.10.199; from 5.11 before 5.15.137; from 5.16 before 6.1.60 — fixed in 4.14.328, 4.19.297, 5.10.199, 5.15.137, 5.4.259, 6.1.60

How to fix

Upgrade to a fixed version: Linux kernel 4.14.328, 4.19.297, 5.10.199, 5.15.137. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2b2edf089df3a69f0072c6e71563394c5a94e62e
• https://git.kernel.org/stable/c/5622592f8f74ae3e594379af02e64ea84772d0dd
• https://git.kernel.org/stable/c/76050b0cc5a72e0c7493287b7e18e1cb9e3c4612
• https://git.kernel.org/stable/c/7937609cd387246aed994e81aa4fa951358fba41
• https://git.kernel.org/stable/c/bb6cacc439ddd2cd51227ab193f4f91cfc7f014f
• https://git.kernel.org/stable/c/c95fa5b20fe03609e0894656fa43c18045b5097e
• https://git.kernel.org/stable/c/d7dbdbe3800a908eecd4975c31be47dd45e2104a
• https://git.kernel.org/stable/c/ffdc881f68073ff86bf21afb9bb954812e8278be

Get alerted when CVE-2023-52919 or the next vulnerability affects your stack