Threats tagged 'ghsa-m4wm-24vm-w63j'

CVE-2024-42130 is a medium severity vulnerability in the Linux kernel's NFC subsystem. It involves an inconsistency between the input data length and count parameters in the nci_rf_intf_activated_ntf_packet() function. This inconsistency could cause issues due to insufficient data being passed to the function, potentially leading to a denial of service. The vulnerability was identified by Syzbot through a crafted write() call with mismatched data length and count values. The Linux kernel has resolved this by adding a check to ensure consistency between data length and count.