Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98577

nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() nfc_llcp_wks_sap() compares only service_name_len bytes, so a short service_name like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length match before strncmp().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < 0c83a8a45fed256ccc5fe7160b436b671fc79fb8affected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < aa555ed5ed0d15efbaf27e0e9f152a6df715278aaffected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < 32b5f0b338bf59391a1cff9a6190a72c4d2c1ba8affected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < 6fad2c34d451d11a9f3f946cae1105fee91d96b8affected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < bf41af8f910cbb5d776a1dfa0671d31a7e262e28affected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < f234197f3bda3aea5d4b1e591d6bcb3660a8b3fcaffected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < 0a0412745c86acd089c6460da715ab966b1615e7affected
  • d646960f7986fefb460a2b062d5ccc8ccfeacc3a to < 408cff6bd60636df201274d320edfdfde9ed41dbaffected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.55 to ≤ 6.18.*unaffected
  • 7.2.9 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References