Linux Kernel NFC FDP Null Pointer Dereference Vulnerability Allowing Out-of-Bounds Write

A vulnerability in the Linux kernel's NFC (Near Field Communication) subsystem has been addressed. The issue arose in the FDP (Flexible Data Protocol) component, specifically within the I2C (Inter-Integrated Circuit) communication. The vulnerability was due to a lack of proper null pointer checks when allocating memory for device properties. This oversight could lead to a null pointer dereference, allowing for an out-of-bounds write operation when the device properties were read later, potentially causing memory corruption.

Impact

Exploitation of this vulnerability could lead to memory corruption through out-of-bounds write operations, which may allow for arbitrary code execution or escalation of privileges.