CVE-2026-98583nfc: nfcmrvl: validate helper command length before pull
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach the data access before the malformed packet is rejected. Validate the complete helper command length before stripping the NCI data header.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 3194c6870158e305dac2af52f83681e9cb67280f builds before 842c0603cfa49530ef081f181a2ddbba77a37231; from 3194c6870158e305dac2af52f83681e9cb67280f before e4b012240c8aaf57cec192234c24e0db5f531ffa; from 3194c6870158e305dac2af52f83681e9cb67280f before f15ad9d6e9173a037587dded77c904fdae8df380; from 3194c6870158e305dac2af52f83681e9cb67280f before a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9; 3194c6870158e305dac2af52f83681e9cb67280f builds before 4d4601e182c8567329be7d919669ec4d847ddd93; from 3194c6870158e305dac2af52f83681e9cb67280f before ed2e00bb22c73156bf8030b6204deabb25cf4eb5; 3194c6870158e305dac2af52f83681e9cb67280f builds before 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c; 3194c6870158e305dac2af52f83681e9cb67280f builds before 686f942332b1667f13f3b8d6a2f50bcfbf42e277 | CNA record |
References
- https://git.kernel.org/stable/c/842c0603cfa49530ef081f181a2ddbba77a37231
- https://git.kernel.org/stable/c/e4b012240c8aaf57cec192234c24e0db5f531ffa
- https://git.kernel.org/stable/c/f15ad9d6e9173a037587dded77c904fdae8df380
- https://git.kernel.org/stable/c/a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9
- https://git.kernel.org/stable/c/4d4601e182c8567329be7d919669ec4d847ddd93
- https://git.kernel.org/stable/c/ed2e00bb22c73156bf8030b6204deabb25cf4eb5
- https://git.kernel.org/stable/c/6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c
- https://git.kernel.org/stable/c/686f942332b1667f13f3b8d6a2f50bcfbf42e277
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.