CVE-2023-53139: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later.

Affected products

• Linux Linux Kernel: from 4.4, before 4.14.310 (fixed in 4.14.310); from 4.15, before 4.19.278 (fixed in 4.19.278); from 4.20, before 5.4.237 (fixed in 5.4.237); from 5.5, before 5.10.175 (fixed in 5.10.175); from 5.11, before 5.15.103 (fixed in 5.15.103); from 5.16, before 6.1.20 (fixed in 6.1.20); …

Published 2025-05-02. Last modified 2026-06-17.