In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine if the protocol is supported. Assert the provided protocol is less than the maximum defined so it doesn't potentially perform a shift-out-of-bounds and provide a clearer error for undefined protocols vs unsupported ones.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/25dd54b95abfdca423b65a4ee620a774777d8213 cve-icon cve-icon
https://git.kernel.org/stable/c/2c231a247a1d1628e41fa1eefd1a5307c41c5f53 cve-icon cve-icon
https://git.kernel.org/stable/c/354a6e707e29cb0c007176ee5b8db8be7bd2dee0 cve-icon cve-icon
https://git.kernel.org/stable/c/6584eba7688dcf999542778b07f63828c21521da cve-icon cve-icon
https://git.kernel.org/stable/c/853dda54ba59ea70d5580a298b7ede4707826848 cve-icon cve-icon
https://git.kernel.org/stable/c/95733ea130e35ef9ec5949a5908dde3feaba92cb cve-icon cve-icon
https://git.kernel.org/stable/c/a424807d860ba816aaafc3064b46b456361c0802 cve-icon cve-icon
https://git.kernel.org/stable/c/a686f84101680b8442181a8846fbd3c934653729 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024030249-CVE-2023-52507-030c@gregkh/T/#u cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52507 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52507 cve-icon
History

Mon, 04 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-02T21:52:20.724Z

Updated: 2024-11-04T14:48:12.970Z

Reserved: 2024-02-20T12:30:33.314Z

Link: CVE-2023-52507

cve-icon Vulnrichment

Updated: 2024-08-02T23:03:20.507Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-03-02T22:15:47.443

Modified: 2024-03-04T13:58:23.447

Link: CVE-2023-52507

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-03-02T00:00:00Z

Links: CVE-2023-52507 - Bugzilla