CVE-2023-53119

Source
https://cve.org/CVERecord?id=CVE-2023-53119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53119
Downstream
Related
Published
2025-05-02T15:55:56.818Z
Modified
2026-02-13T12:49:27.894072Z
Summary
nfc: pn533: initialize struct pn533_out_arg properly
Details

In the Linux kernel, the following vulnerability has been resolved:

nfc: pn533: initialize struct pn533outarg properly

struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533out_complete() callback function. It causes the following failure:

general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:pn533outcomplete.cold+0x15/0x44 drivers/nfc/pn533/usb.c:441 Call Trace: <IRQ> _usbhcdgivebackurb+0x2b6/0x5c0 drivers/usb/core/hcd.c:1671 usbhcdgivebackurb+0x384/0x430 drivers/usb/core/hcd.c:1754 dummytimer+0x1203/0x32d0 drivers/usb/gadget/udc/dummyhcd.c:1988 calltimerfn+0x1da/0x800 kernel/time/timer.c:1700 expiretimers+0x234/0x330 kernel/time/timer.c:1751 _runtimers kernel/time/timer.c:2022 [inline] _runtimers kernel/time/timer.c:1995 [inline] runtimersoftirq+0x326/0x910 kernel/time/timer.c:2035 _dosoftirq+0x1fb/0xaf6 kernel/softirq.c:571 invokesoftirq kernel/softirq.c:445 [inline] _irqexitrcu+0x123/0x180 kernel/softirq.c:650 irqexitrcu+0x9/0x20 kernel/softirq.c:662 sysvecapictimer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107

Initialize the field with the pn533usbphy currently used.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53119.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
35529d6b827eedb6bf7e81130e4b7e0aba9e58d2
Fixed
2bd1ed6d607d7013ed4959e86990a04f028543ef
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
321db5131c92983dac4f3338e8fbb6df214238c0
Fixed
4c20a07ed26a71a8ccc9c6d935fc181573f5462e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9424d2205fe94a095fb9365ec0c6137f0b394a2b
Fixed
0f9c1f26d434c32520dfe33326b28c5954bc4299
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0ca78c99656f5c448567db1e148367aa3b01c80a
Fixed
2703da78849c47b6b5b4471edb35fc7b7f91dead
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
39ae73e581112cfe27ba50aecb1c891ce57cecb1
Fixed
2bee84369b76f6c9ef71938069c65a6ebd1a12f7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8998db5021a28ad67aa8d627bdb4226e4046ccc4
Fixed
a97ef110c491b72c138111a595a3a3af56cbc94c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9dab880d675b9d0dd56c6428e4e8352a3339371d
Fixed
2cbd4213baf7be5d87d183e2032c54003de0790f
Fixed
484b7059796e3bc1cb527caa61dfc60da649b4f6

Affected versions

v4.*
v4.14.303
v4.14.304
v4.14.305
v4.14.306
v4.14.307
v4.14.308
v4.14.309
v4.14.310
v4.19.270
v4.19.271
v4.19.272
v4.19.273
v4.19.274
v4.19.275
v4.19.276
v4.19.277
v4.19.278
v5.*
v5.10.164
v5.10.165
v5.10.166
v5.10.167
v5.10.168
v5.10.169
v5.10.170
v5.10.171
v5.10.172
v5.10.173
v5.10.174
v5.10.175
v5.15.100
v5.15.101
v5.15.102
v5.15.103
v5.15.89
v5.15.90
v5.15.91
v5.15.92
v5.15.93
v5.15.94
v5.15.95
v5.15.96
v5.15.97
v5.15.98
v5.15.99
v5.4.229
v5.4.230
v5.4.231
v5.4.232
v5.4.233
v5.4.234
v5.4.235
v5.4.236
v5.4.237
v6.*
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.20
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.2.1
v6.2.2
v6.2.3
v6.2.4
v6.2.5
v6.2.6
v6.2.7
v6.3-rc1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53119.json"
vanir_signatures
[
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bee84369b76f6c9ef71938069c65a6ebd1a12f7",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-03a95295",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c20a07ed26a71a8ccc9c6d935fc181573f5462e",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-045bf3ac",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f9c1f26d434c32520dfe33326b28c5954bc4299",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-0f96c387",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@484b7059796e3bc1cb527caa61dfc60da649b4f6",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-19207f37",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a97ef110c491b72c138111a595a3a3af56cbc94c",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-26be1b32",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bd1ed6d607d7013ed4959e86990a04f028543ef",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-29b40ea2",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@484b7059796e3bc1cb527caa61dfc60da649b4f6",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-36345201",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bee84369b76f6c9ef71938069c65a6ebd1a12f7",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-4144ad84",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2bd1ed6d607d7013ed4959e86990a04f028543ef",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-864c82ab",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f9c1f26d434c32520dfe33326b28c5954bc4299",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-951bdc87",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c20a07ed26a71a8ccc9c6d935fc181573f5462e",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-aa9a2a84",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2703da78849c47b6b5b4471edb35fc7b7f91dead",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-b55864b0",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cbd4213baf7be5d87d183e2032c54003de0790f",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-b6823ad9",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2703da78849c47b6b5b4471edb35fc7b7f91dead",
        "digest": {
            "function_hash": "102079779582223984588863234796172651612",
            "length": 924.0
        },
        "id": "CVE-2023-53119-c54dd2d4",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c",
            "function": "pn533_usb_send_frame"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cbd4213baf7be5d87d183e2032c54003de0790f",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-c9ea1966",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a97ef110c491b72c138111a595a3a3af56cbc94c",
        "digest": {
            "line_hashes": [
                "31737506079171037350389078216120399222",
                "298789069214953547815569627237513085570",
                "208508381526423374641017127378767113688"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-53119-fec9988b",
        "deprecated": false,
        "target": {
            "file": "drivers/nfc/pn533/usb.c"
        }
    }
]

Git / github.com/gregkh/linux

Affected versions

v4.*
v4.14.303
v4.14.304
v4.14.305
v4.14.306
v4.14.307
v4.14.308
v4.14.309
v4.14.310
v4.19.270
v4.19.271
v4.19.272
v4.19.273
v4.19.274
v4.19.275
v4.19.276
v4.19.277
v4.19.278
v4.19.279
v4.19.280
v4.19.281
v4.19.282
v4.19.283
v4.19.284
v4.19.285
v4.19.286
v4.19.287
v4.19.288
v4.19.289
v4.19.290
v4.19.291
v4.19.292
v4.19.293
v4.19.294
v4.19.295
v4.19.296
v4.19.297
v4.19.298
v4.19.299
v4.19.300
v4.19.301
v4.19.302
v4.19.303
v4.19.304
v4.19.305
v4.19.306
v4.19.307
v4.19.308
v4.19.309
v4.19.310
v4.19.311
v4.19.312
v4.19.313
v4.19.314
v4.19.315
v4.19.316
v4.19.317
v4.19.318
v4.19.319
v4.19.320
v4.19.321
v4.19.322
v4.19.323
v4.19.324
v4.19.325
v5.*
v5.10.164
v5.10.165
v5.10.166
v5.10.167
v5.10.168
v5.10.169
v5.10.170
v5.10.171
v5.10.172
v5.10.173
v5.10.174
v5.10.175
v5.15.100
v5.15.101
v5.15.102
v5.15.103
v5.15.89
v5.15.90
v5.15.91
v5.15.92
v5.15.93
v5.15.94
v5.15.95
v5.15.96
v5.15.97
v5.15.98
v5.15.99
v5.4.229
v5.4.230
v5.4.231
v5.4.232
v5.4.233
v5.4.234
v5.4.235
v5.4.236
v5.4.237
v5.4.238
v5.4.239
v5.4.240
v5.4.241
v5.4.242
v5.4.243
v5.4.244
v5.4.245
v5.4.246
v5.4.247
v5.4.248
v5.4.249
v5.4.250
v5.4.251
v5.4.252
v5.4.253
v5.4.254
v5.4.255
v5.4.256
v5.4.257
v5.4.258
v5.4.259
v5.4.260
v5.4.261
v5.4.262
v5.4.263
v5.4.264
v5.4.265
v5.4.266
v5.4.267
v5.4.268
v5.4.269
v5.4.270
v5.4.271
v5.4.272
v5.4.273
v5.4.274
v5.4.275
v5.4.276
v5.4.277
v5.4.278
v5.4.279
v5.4.280
v5.4.281
v5.4.282
v5.4.283
v5.4.284
v5.4.285
v5.4.286
v5.4.287
v5.4.288
v5.4.289
v5.4.290
v5.4.291
v5.4.292
v5.4.293
v5.4.294
v5.4.295
v5.4.296
v5.4.297
v5.4.298
v5.4.299
v5.4.300
v5.4.301
v5.4.302
v6.*
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.20
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.2.1
v6.2.2
v6.2.3
v6.2.4
v6.2.5
v6.2.6
v6.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53119.json"