-

CVE-2026-98583

nfc: nfcmrvl: validate helper command length before pull

In the Linux kernel, the following vulnerability has been resolved:

nfc: nfcmrvl: validate helper command length before pull

The firmware download receive path removes the NCI data header and
reads the helper command before validating the remaining packet length.
A short frame can therefore reach the data access before the malformed
packet is rejected.

Validate the complete helper command length before stripping the NCI
data header.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < 842c0603cfa49530ef081f181a2ddbba77a37231
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < e4b012240c8aaf57cec192234c24e0db5f531ffa
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < f15ad9d6e9173a037587dded77c904fdae8df380
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < 4d4601e182c8567329be7d919669ec4d847ddd93
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < ed2e00bb22c73156bf8030b6204deabb25cf4eb5
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c
Status affected
Version 3194c6870158e305dac2af52f83681e9cb67280f
Version < 686f942332b1667f13f3b8d6a2f50bcfbf42e277
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.4
Status affected
Version 0
Version < 4.4
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.106
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/842c0603cfa49530ef081f181a2ddbba77a37231
https://git.kernel.org/stable/c/e4b012240c8aaf57cec192234c24e0db5f531ffa
https://git.kernel.org/stable/c/f15ad9d6e9173a037587dded77c904fdae8df380
https://git.kernel.org/stable/c/a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9
https://git.kernel.org/stable/c/4d4601e182c8567329be7d919669ec4d847ddd93
https://git.kernel.org/stable/c/ed2e00bb22c73156bf8030b6204deabb25cf4eb5
https://git.kernel.org/stable/c/6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c
https://git.kernel.org/stable/c/686f942332b1667f13f3b8d6a2f50bcfbf42e277