In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: uart: Set tty->disc_data only in success path
Setting tty->discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before NCIUARTSETDRIVER IOCTL succeeded (broken hardware?). Close the window by exposing tty->discdata only on the success path, when opening of the NCI device and trymoduleget() succeeds.
The code differs in error path in one aspect: tty->discdata won't be ever assigned thus NULL-ified. This however should not be relevant difference, because of "tty->discdata=NULL" in nciuarttty_open().
[
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55c3dbd8389636161090a2b2b6d2d709b9602e9c",
"id": "CVE-2025-38416-0ce6a1c9"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a514fca2b8e95838a3ba600f31a18fa60b76d893",
"id": "CVE-2025-38416-2e9ac7e9"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7722619a9c307e9938d735cf4a2210d3d48dcb",
"id": "CVE-2025-38416-33b64585"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc27ab48904ceb7e4792f0c400f1ef175edf16fe",
"id": "CVE-2025-38416-450d7d49"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8acc7080ad55c5402a1b818b3008998247dda87",
"id": "CVE-2025-38416-6ae05760"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55c3dbd8389636161090a2b2b6d2d709b9602e9c",
"id": "CVE-2025-38416-7bd02524"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9799db771b2d574d5bf0dfb3177485e5f40d4d6",
"id": "CVE-2025-38416-852b23b1"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000bfbc6bc334a93fffca8f5aa9583e7b6356cb5",
"id": "CVE-2025-38416-87824e60"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8acc7080ad55c5402a1b818b3008998247dda87",
"id": "CVE-2025-38416-9598ac32"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac6992f72bd8e22679c1e147ac214de6a7093c23",
"id": "CVE-2025-38416-9795888b"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7722619a9c307e9938d735cf4a2210d3d48dcb",
"id": "CVE-2025-38416-a7fec065"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fc27ab48904ceb7e4792f0c400f1ef175edf16fe",
"id": "CVE-2025-38416-c8d4ad86"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac6992f72bd8e22679c1e147ac214de6a7093c23",
"id": "CVE-2025-38416-d162c69f"
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"315454587288945264315202602323766393781",
"264526064580864503941387004755994246085",
"246636072915344313109235360742948647253",
"144785507828176107348455465325835229431",
"48717280901379296714958053334491489569",
"33959078024944983189443543265501397529",
"76306879701844755266118542352957243203",
"325058405573798840862431640572829719620",
"229339275484590611786178392470704812556",
"137940783973341659703778339616676105671",
"1905709036086084081060891174060665555",
"45268117790889792944187526851239016385",
"288912100454603851749589526390152371029",
"229567902293406354930631371648562412242",
"309843590773490503757969824039904668137",
"10930561597925996397538423596821604870",
"187470945120159528310019174824408139401",
"221238985672882945382468798946622040538"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9799db771b2d574d5bf0dfb3177485e5f40d4d6",
"id": "CVE-2025-38416-dbd21e5b"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000bfbc6bc334a93fffca8f5aa9583e7b6356cb5",
"id": "CVE-2025-38416-f245df0f"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "213294053222818580448330918745661599624",
"length": 771.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "nci_uart_set_driver",
"file": "net/nfc/nci/uart.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a514fca2b8e95838a3ba600f31a18fa60b76d893",
"id": "CVE-2025-38416-fcf5fdcf"
}
]