CVE-2024-36915: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-36915 affects the Linux kernel's NFC LLCP (Logical Link Control Protocol) socket implementation. The vulnerability was discovered by syzbot and reported on May 30, 2024. It involves unsafe memory access in the nfc_llcp_setsockopt() function within the net/nfc/llcp_sock.c file (Kernel Git).

The vulnerability stems from unsafe calls to copy_from_sockptr() in the nfc_llcp_setsockopt() function. When processing socket options, the function performs an out-of-bounds memory access, as detected by the Kernel Address Sanitizer (KASAN). The issue occurs specifically at net/nfc/llcp_sock.c:255, where the code attempts to read 4 bytes from an invalid memory address (Kernel Git).

The vulnerability could lead to a slab-out-of-bounds memory access in the Linux kernel's NFC subsystem. This type of vulnerability typically can result in system crashes (denial of service) or potential information leaks from kernel memory (NVD).

The vulnerability was discovered through syzbot's kernel testing infrastructure and has been confirmed with a proof-of-concept that triggers a KASAN report. The issue can be triggered through the setsockopt system call when interacting with NFC LLCP sockets (Kernel Git).

The vulnerability has been fixed by replacing unsafe copy_from_sockptr() calls with copy_safe_from_sockptr() in the affected code. The fix has been incorporated into multiple Linux kernel versions, including 6.1.119-1~deb11u1 for Debian systems (Debian LTS).