CVE-2023-53139

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties

devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= a06347c04c13e380afce0c9816df51f00b83faf1, < ad11b872bc9b5d27e56183c6b01f9218c85395d2; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 98f49e693e02c1dafd5786be3468657840dd6f06; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 0a3664a1058d4b2b1ea2112cc275ca47fba7fc08; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 80be62358fa5507cefbaa067c7e6648401f2c3da; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 4357bbb921fe9e81d0fd9f70d669d1f177d8380e; >= a06347c04c13e380afce0c9816df51f00b83faf1, < ce93f1afc05941a572f5a69e2ed4012af905a693; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 27824b2f98818215adc9661e563252c48dab1a13; >= a06347c04c13e380afce0c9816df51f00b83faf1, < 11f180a5d62a51b484e9648f9b310e1bd50b1a57
LinuxLinux4.4

References

Timeline

Published
May 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-53144.3The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capability check on the CVE-2023-531405.5In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier RemovCVE-2023-531415.5In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() iCVE-2023-531427.8In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_moduleCVE-2023-531435.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix another off-by-one fsmap error on 1k block filesystems ApparCVE-2023-531445.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the caCVE-2023-531457.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race CVE-2023-531465.5In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_iCVE-2023-531475.5In the Linux kernel, the following vulnerability has been resolved: xfrm: add NULL check in xfrm_update_ae_params Normally, x->replay_esn CVE-2023-531487.8In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a ThunderbCVE-2023-531495.5In the Linux kernel, the following vulnerability has been resolved: ext4: avoid deadlock in fs reclaim with page writeback Ext4 has a fileCVE-2023-53158.8The Google Maps made Simple plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including,
CVE-2023-53139: Medium severity, CVSS 5.5 | Vulnix