Linux Kernel Vulnerability in NFC NCI UART Driver

CVE-2025-38416

What is CVE-2025-38416?

A vulnerability in the Linux kernel's NFC framework affects the NCI UART driver, which mishandles the setting of tty->disc_data. By prematurely assigning tty->disc_data before a successful device opening, there exists a risk of the device sending data unintentionally during an error state. The code modification ensures that tty->disc_data is only set when the device has been successfully opened and the module has been properly acquired, mitigating the risk posed by broken hardware and ensuring cleaner error handling.

References