Linux Kernel NFC Memory Leak Vulnerability in nfcmrvl I2C NCI Send Function

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's NFC subsystem, specifically within the nfcmrvl I2C NCI send function. The issue arises because the function nfcmrvl_nci_send() calls nfcmrvl_i2c_nci_send() without properly managing memory. While nfcmrvl_i2c_nci_send() is responsible for freeing the socket buffer (skb), this only occurs if the I2C master send operation is successful. As a result, if the I2C master send fails, the skb is not freed, leading to a memory leak. The vulnerability has been addressed by modifying the function to free the skb regardless of the I2C master's send operation outcome.

Impact

Exploitation of this vulnerability can lead to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.