CVE-2025-21735 NFC: nci: Add bounds checking in nci_hci_create_pipe()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in NFC Protocol Vulnerabilities Two vulnerabilities in the NFC protocol have been addressed, affecting systems utilizing the nci component. CVE-2024-38381, published on June 21, 2024, fixes an uninitialized value issue in nci_rx_work. CVE-2025-21735, published on February 27, 2025, adds bounds checking in nci_hci_create_pipe(). 2 sources 45