CVE-2026-43291 net: nfc: nci: Fix parameter validation for packet data

🗓️ 08 May 2026 13:11:15Reported by LinuxType

Linux kernel fix for NFC packet data validation to handle variable length packets and restore communication.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2026-43291	8 May 202613:11	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	8 May 202600:00	–	cnnvd
CVE	CVE-2026-43291	8 May 202613:11	–	cve
Debian CVE	CVE-2026-43291	8 May 202613:11	–	debiancve
EUVD	EUVD-2026-28561	8 May 202615:31	–	euvd
NVD	CVE-2026-43291	8 May 202614:16	–	nvd
OSV	BELL-CVE-2026-43291	21 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-43291	8 May 202614:16	–	osv
OSV	ROOT-OS-UBUNTU-2204-CVE-2026-43291 CVE-2026-43291 in rootio-linux - Patched by Root	25 Jun 202607:42	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/nfc/nci/ntf.c"
    ],
    "versions": [
      {
        "version": "8fcc7315a10a84264e55bb65ede10f0af20a983f",
        "lessThan": "a24a8a582da4426b2042e510a1080df84083b51d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bfdda0123dde406dbff62e7e9136037e97998a15",
        "lessThan": "f5218426f765eee22e178df9c126d974792fb6a5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ba68bea1e356f466ad29449938bea12f5f3711f",
        "lessThan": "ad058a4317db7fdb3f09caa6ed536d24a62ce6a0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "74837bca0748763a77f77db47a0bdbe63b347628",
        "lessThan": "3b91160e9a91b5a2662875417dc42dc5b0bf03ea",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9c328f54741bd5465ca1dc717c84c04242fac2e1",
        "lessThan": "c692db813a7e3b7c3c17d6e9a3ad2a018bf1142b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9c328f54741bd5465ca1dc717c84c04242fac2e1",
        "lessThan": "498fc5d0d650c77e87fcc73808d4f43240c21805",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9c328f54741bd5465ca1dc717c84c04242fac2e1",
        "lessThan": "571dcbeb8e635182bb825ae758399831805693c2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c395d1e548cc68e84584ffa2e3ca9796a78bf7b9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.15.195",
        "lessThan": "5.15.202",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.1.156",
        "lessThan": "6.1.165",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.6.112",
        "lessThan": "6.6.128",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.12.53",
        "lessThan": "6.12.75",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.17.3",
        "lessThan": "6.18",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/nfc/nci/ntf.c"
    ],
    "versions": [
      {
        "version": "6.18",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.18",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.202",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.165",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.128",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.75",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.16",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.6",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/c692db813a7e3b7c3c17d6e9a3ad2a018bf1142b
git	www.git.kernel.org/stable/c/ad058a4317db7fdb3f09caa6ed536d24a62ce6a0
git	www.git.kernel.org/stable/c/f5218426f765eee22e178df9c126d974792fb6a5
git	www.git.kernel.org/stable/c/498fc5d0d650c77e87fcc73808d4f43240c21805
git	www.git.kernel.org/stable/c/a24a8a582da4426b2042e510a1080df84083b51d
git	www.git.kernel.org/stable/c/3b91160e9a91b5a2662875417dc42dc5b0bf03ea
git	www.git.kernel.org/stable/c/571dcbeb8e635182bb825ae758399831805693c2

23 May 2026 16:06Current

CVSS 3.18.3

EPSS0.00269