In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: uart: Set tty->disc_data only in success path
Setting tty->discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->discdata only on the success path, when opening of the NCI device and trymoduleget() succeeds.
The code differs in error path in one aspect: tty->discdata won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->discdata=NULL" in nciuarttty_open().
[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55c3dbd8389636161090a2b2b6d2d709b9602e9c",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-0ce6a1c9",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a514fca2b8e95838a3ba600f31a18fa60b76d893",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-2e9ac7e9",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7722619a9c307e9938d735cf4a2210d3d48dcb",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-33b64585",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc27ab48904ceb7e4792f0c400f1ef175edf16fe",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-450d7d49",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8acc7080ad55c5402a1b818b3008998247dda87",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-6ae05760",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55c3dbd8389636161090a2b2b6d2d709b9602e9c",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-7bd02524",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9799db771b2d574d5bf0dfb3177485e5f40d4d6",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-852b23b1",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000bfbc6bc334a93fffca8f5aa9583e7b6356cb5",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-87824e60",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8acc7080ad55c5402a1b818b3008998247dda87",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-9598ac32",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac6992f72bd8e22679c1e147ac214de6a7093c23",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-9795888b",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7722619a9c307e9938d735cf4a2210d3d48dcb",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-a7fec065",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc27ab48904ceb7e4792f0c400f1ef175edf16fe",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-c8d4ad86",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac6992f72bd8e22679c1e147ac214de6a7093c23",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-d162c69f",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9799db771b2d574d5bf0dfb3177485e5f40d4d6",
        "target": {
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-dbd21e5b",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "315454587288945264315202602323766393781",
                "264526064580864503941387004755994246085",
                "246636072915344313109235360742948647253",
                "144785507828176107348455465325835229431",
                "48717280901379296714958053334491489569",
                "33959078024944983189443543265501397529",
                "76306879701844755266118542352957243203",
                "325058405573798840862431640572829719620",
                "229339275484590611786178392470704812556",
                "137940783973341659703778339616676105671",
                "1905709036086084081060891174060665555",
                "45268117790889792944187526851239016385",
                "288912100454603851749589526390152371029",
                "229567902293406354930631371648562412242",
                "309843590773490503757969824039904668137",
                "10930561597925996397538423596821604870",
                "187470945120159528310019174824408139401",
                "221238985672882945382468798946622040538"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000bfbc6bc334a93fffca8f5aa9583e7b6356cb5",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-f245df0f",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a514fca2b8e95838a3ba600f31a18fa60b76d893",
        "target": {
            "function": "nci_uart_set_driver",
            "file": "net/nfc/nci/uart.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2025-38416-fcf5fdcf",
        "signature_type": "Function",
        "digest": {
            "length": 771.0,
            "function_hash": "213294053222818580448330918745661599624"
        }
    }
]