SB2025121090 - Out-of-bounds read in Linux kernel nfc pn533 driver
Published: December 10, 2025 Updated: December 12, 2025
Security Bulletin ID
SB2025121090
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2022-50656)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the pn533_poll_dep_complete() and pn533_in_dep_link_up_complete() functions in drivers/nfc/pn533/pn533.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/61a7e15d55fae329a245535c3bac494e401005b8
- https://git.kernel.org/stable/c/755019e37815a66bb0a23893debbd3dd640ccbd3
- https://git.kernel.org/stable/c/8bddef54cbe9ede5ac7478f1e1e968fcfe7e6f03
- https://git.kernel.org/stable/c/9da4a0411f3455e3885831d0758bee3e3d565bbc
- https://git.kernel.org/stable/c/9f28157778ede0d4f183f7ab3b46995bb400abbe
- https://git.kernel.org/stable/c/aae9c24ebd901f482e6c88b6f9e0c80dc5b536d6
- https://git.kernel.org/stable/c/aea9e64dec2cc6cd742e07ecd4e6236fc76b389b
- https://git.kernel.org/stable/c/bef2f478513e7367ef3b05441f6afca981de29be
- https://git.kernel.org/stable/c/e491285b4d08884b622638be8e4961eb43b0af64
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.2