An out-of-bounds read vulnerability in the Linux kernel NFC HCI subsystem could be exploited by an adjacent attacker to cause system instability or information disclosure.

The vulnerability exists in nfc_hci_recv_from_llc and nci_hci_data_received_cb. It is triggered by reading from packet headers without confirming the buffer contains sufficient data, allowing an unauthenticated adjacent attacker to cause an out-of-bounds read.

With a CVSS score of 8.8, this vulnerability represents a high risk to availability and confidentiality. An attacker capable of sending malicious NFC packets could potentially crash the system or leak sensitive kernel memory contents.

Immediate Action: Update the Linux kernel to 5.10.259, 5.15.210, 6.1.176, 6.6.143, or newer stable versions.

Proactive Monitoring: Monitor dmesg and system logs for unexpected errors related to the NFC subsystem or kernel memory access violations.

Compensating Controls: Disable NFC interfaces at the kernel level if they are not required for system functionality to eliminate the attack surface.

Public Exploit Available: No (exploit_available: false)

Organizations utilizing NFC hardware on Linux systems must treat this as a high-priority update. Immediate patching is recommended to prevent unauthorized information disclosure or service disruption through this memory corruption flaw.