Can you explain this vulnerability to me?

This vulnerability is a slab-out-of-bounds read in the Linux kernel's NFC subsystem, specifically in the pn533 driver. It occurs because the nfc_target structure is not properly cleared before use, causing it to retain garbage values. When nla_put() is called from nfc_genl_send_target(), it can read beyond the allocated memory if the sensb_res_len field is too large. The fix involves clearing the nfc_target structure with memset() before it is used to prevent this out-of-bounds read.

Useful 0 Not Useful 0

How can this vulnerability impact me? :

This vulnerability can lead to a slab-out-of-bounds read in kernel memory, which may cause system instability, crashes, or potentially expose sensitive kernel memory contents. Such memory corruption issues can be exploited to compromise system security or cause denial of service.

Useful 0 Not Useful 0