CVE-2023-53298

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the NFC subsystem related to memory management. Specifically, a memory leak occurs in the nfc genl se io function when handling secure element (SE) input/output operations. The callback context for sending/receiving APDUs to/from the selected secure element is allocated but not always freed under certain error conditions, leading to a memory leak. The patch resolves this by explicitly freeing the context in these error paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.