-

CVE-2026-98578

nfc: st21nfca: validate ISO15693 inventory length

In the Linux kernel, the following vulnerability has been resolved:

nfc: st21nfca: validate ISO15693 inventory length

The ISO15693 inventory helper removes a two-byte prefix without checking
that it exists, then accepts a one-byte remainder before reading data[1] as
the DSFID.

Require the prefix and at least two remaining bytes before copying the UID
data and reading the DSFID.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < e47b2a350bb0ff123434ec5484c6dc3333b0727c
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < 57d183764f3002f9625ee4deeeb20716c519534e
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < 3af2ea4035581a1607d9830779c187a0c7e225aa
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < 9fa21b0f78adb514e3bd96a505ddb752e9727ff3
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < 6353dae51bc9b3cad13c9d890b53311a46c96b4e
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < fdd95e819d828c975aaeb258a3fed5dd7fd136d0
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < a86987d03a4d39acdbe4533d83db4d656ea36c59
Status affected
Version 7974728094d35f38775417a26d8f30ea3602496a
Version < 7f2ea5ed588c03d481f0301e6c3d4240132383fb
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.16
Status affected
Version 0
Version < 3.16
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.106
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e47b2a350bb0ff123434ec5484c6dc3333b0727c
https://git.kernel.org/stable/c/57d183764f3002f9625ee4deeeb20716c519534e
https://git.kernel.org/stable/c/3af2ea4035581a1607d9830779c187a0c7e225aa
https://git.kernel.org/stable/c/9fa21b0f78adb514e3bd96a505ddb752e9727ff3
https://git.kernel.org/stable/c/6353dae51bc9b3cad13c9d890b53311a46c96b4e
https://git.kernel.org/stable/c/fdd95e819d828c975aaeb258a3fed5dd7fd136d0
https://git.kernel.org/stable/c/a86987d03a4d39acdbe4533d83db4d656ea36c59
https://git.kernel.org/stable/c/7f2ea5ed588c03d481f0301e6c3d4240132383fb