Yüksek CVSS 7.8
CVE-2025-21735: Linux Kernel: sınır dışı yazma
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,38 (yüzdelik 32)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 4.4 | — | 6.1.129 |
| linux-linux-kernel | 6.2 | — | 6.6.78 |
| linux-linux-kernel | 6.7 | — | 6.12.14 |
| linux-linux-kernel | 6.13 | — | 6.13.3 |