Linux Kernel NFC NCI UART TTY Data Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's NFC subsystem, specifically within the NCI UART implementation, has been addressed. The issue arose because the tty->disc_data was set before the NCI device was fully opened, creating a potential error condition. This premature assignment could lead to data being sent from the device before the NCIUARTSETDRIVER IOCTL had successfully completed, possibly due to faulty hardware. The vulnerability has been resolved by ensuring that tty->disc_data is only assigned after the NCI device has been successfully opened and the module has been properly loaded. This change prevents the introduction of a timing window where data could be incorrectly transmitted.

Impact

Exploitation of this vulnerability could lead to improper handling of UART data, potentially allowing for erroneous data transmission before the NCI device is fully initialized.

Added: Jul 25, 2025, 5:09 PM
Updated: Jul 25, 2025, 5:09 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.