{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-38416",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-38416",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-07-25T14:00:17.849Z",
    "updatedAt": "2026-08-05T12:01:43.897Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "NFC: nci: uart: Set tty->disc_data only in success path",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: nci: uart: Set tty->disc_data only in success path\n\nSetting tty->disc_data before opening the NCI device means we need to\nclean it up on error paths.  This also opens some short window if device\nstarts sending data, even before NCIUARTSETDRIVER IOCTL succeeded\n(broken hardware?).  Close the window by exposing tty->disc_data only on\nthe success path, when opening of the NCI device and try_module_get()\nsucceeds.\n\nThe code differs in error path in one aspect: tty->disc_data won't be\never assigned thus NULL-ified.  This however should not be relevant\ndifference, because of \"tty->disc_data=NULL\" in nci_uart_tty_open().",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a514fca2b8e95838a3ba600f31a18fa60b76d893"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "000bfbc6bc334a93fffca8f5aa9583e7b6356cb5"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ac6992f72bd8e22679c1e147ac214de6a7093c23"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "dc7722619a9c307e9938d735cf4a2210d3d48dcb"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a8acc7080ad55c5402a1b818b3008998247dda87"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "55c3dbd8389636161090a2b2b6d2d709b9602e9c"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e9799db771b2d574d5bf0dfb3177485e5f40d4d6"
            },
            {
              "version": "9961127d4bce6325e9a0b0fb105e0c85a6c62cb7",
              "status": "affected",
              "versionType": "git",
              "lessThan": "fc27ab48904ceb7e4792f0c400f1ef175edf16fe"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.2",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.2"
            },
            {
              "version": "5.4.295",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.239",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.186",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.142",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.95",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.35",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.15.4",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.15.*"
            },
            {
              "version": "6.16",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}