imPC@ndo IT

Tracker / CVE-2025-21735

CVE-2025-21735

High 8.8

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().

Affected products and versions

linux linux_kernel · 4.4 → 6.1.129
linux linux_kernel · 6.13 → 6.13.3
linux linux_kernel · 6.2 → 6.6.78
linux linux_kernel · 6.7 → 6.12.14

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References