net: nfc: nci: Fix parameter validation for packet data (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.27 % · percentile 19 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet data Since commit 9c328f54741b ("net: nfc: nci: Add parameter validation for packet data") communication with nci nfc chips is not working any more. The mentioned commit tries to fix access of uninitialized data, but failed to understand that in some cases the data packet is of variable length and can therefore not be compared to the maximum packet length given by the sizeof(struct).
Weaknesses (CWE)
- CWE-908 — Use of Uninitialized Resource
References
- https://git.kernel.org/stable/c/a24a8a582da4426b2042e510a1080df84083b51d
- https://git.kernel.org/stable/c/f5218426f765eee22e178df9c126d974792fb6a5
- https://git.kernel.org/stable/c/ad058a4317db7fdb3f09caa6ed536d24a62ce6a0
- https://git.kernel.org/stable/c/3b91160e9a91b5a2662875417dc42dc5b0bf03ea
- https://git.kernel.org/stable/c/c692db813a7e3b7c3c17d6e9a3ad2a018bf1142b
- https://git.kernel.org/stable/c/498fc5d0d650c77e87fcc73808d4f43240c21805
- https://git.kernel.org/stable/c/571dcbeb8e635182bb825ae758399831805693c2
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H | Linux |
| CVSS 3.1 | HIGH 8.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-28561
- GCVE · GCVE-0-2026-43291
CERT-FR advisories
- CERTFR-2026-AVI-1229 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1093 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0985 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.195 < 5.15.202cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.156 < 6.1.165cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.112 < 6.6.128cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.12.53 < 6.12.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.17.3 < 6.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.18 < 6.18.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.6
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 8fcc7315a10a84264e55bb65ede10f0af20a983f < a24a8a582da4426b2042e510a1080df84083b51d ; affected bfdda0123dde406dbff62e7e9136037e97998a15 < f5218426f765eee22e178df9c126d974792fb6a5 ; affected 0ba68bea1e356f466ad29449938bea12f5f3711f < ad058a4317db7fdb3f09caa6ed536d24a62ce6a0 ; affected 74837bca0748763a77f77db47a0bdbe63b347628 < 3b91160e9a91b5a2662875417dc42dc5b0bf03ea ; affected 9c328f54741bd5465ca1dc717c84c04242fac2e1 < c692db813a7e3b7c3c17d6e9a3ad2a018bf1142b ; affected 9c328f54741bd5465ca1dc717c84c04242fac2e1 < 498fc5d0d650c77e87fcc73808d4f43240c21805 |
| Linux · Linux | affected 6.18 ; unaffected 0 < 6.18 ; unaffected 5.15.202 ≤ 5.15.* ; unaffected 6.1.165 ≤ 6.1.* ; unaffected 6.6.128 ≤ 6.6.* ; unaffected 6.12.75 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |