Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98583

nfc: nfcmrvl: validate helper command length before pull

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach the data access before the malformed packet is rejected. Validate the complete helper command length before stripping the NCI data header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3194c6870158e305dac2af52f83681e9cb67280f to < 842c0603cfa49530ef081f181a2ddbba77a37231affected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < e4b012240c8aaf57cec192234c24e0db5f531ffaaffected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < f15ad9d6e9173a037587dded77c904fdae8df380affected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9affected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < 4d4601e182c8567329be7d919669ec4d847ddd93affected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < ed2e00bb22c73156bf8030b6204deabb25cf4eb5affected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3caffected
  • 3194c6870158e305dac2af52f83681e9cb67280f to < 686f942332b1667f13f3b8d6a2f50bcfbf42e277affected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.55 to ≤ 6.18.*unaffected
  • 7.2.9 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References