56 matches found
SUSE CVE-2026-80797
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...
CVE-2026-80823 nfc: st21nfca: validate ATR_REQ length against the received frame
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
CVE-2026-80823
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
CVE-2026-80797 nfc: pn533: purge fragmented skbs during cleanup
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...
CVE-2026-80797
CVE-2026-80797 is a memory leak in the Linux kernel NFC PN533 driver. The function pn53x_common_clean() purges resp_q before freeing the common PN533 state but does not release fragment_skb , which holds queued transmit fragments used when sending large initiator or target-mode frames. If the dev...
CVE-2026-80797
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...
Linux Distros Unpatched Vulnerability : CVE-2026-80797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The...
The vulnerability of the nxp_nci_i2c_set_mode() function in the drivers/nfc/nxp-nci/i2c.c module of the Linux operating system’s NFC driver, which allows a hacker to cause a service failure.
The vulnerability of the nxpncii2csetmode function in the drivers/nfc/nxp-nci/i2c.c module of the Linux NFC kernel driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the pn533_usb_disconnect() function in the drivers/nfc/pn533/usb.c module of the Linux kernel NFC driver allows a hacker to cause a service failure.
The vulnerability of the pn533usbdisconnect function in the NFC driver/nfc/pn533/usb.c module of the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
A use-after-free flaw was discovered in ndlcremove in drivers/nfc/st-nci/ndlc.c within the Linux kernel. This flaw could allow an attacker to cause the system to crash due to a race condition...
Linux Distros Unpatched Vulnerability : CVE-2026-43098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: s3fwrn5: allocate rx skb before consuming bytes s3fwrn82uartread reports the number of accepted bytes to the serdev core. The current code consumes bytes...
nfc: pn533: allocate rx skb before consuming bytes
...
EUVD-2022-42292
Malicious code in bioql PyPI...
CVE-2022-39847
Use after free vulnerability in setnftpid and signalhandler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions...
CVE-2023-53119
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...
DEBIAN-CVE-2023-53106
In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlcremove due to race condition This bug influences both stncii2cremove and stncispiremove. Take stncii2cremove as an example. In stncii2cprobe, it called ndlcprobe and bound &ndlc-smwork...
CVE-2023-53106 nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlcremove due to race condition This bug influences both stncii2cremove and stncispiremove. Take stncii2cremove as an example. In stncii2cprobe, it called ndlcprobe and bound &ndlc-smwork...
UBUNTU-CVE-2022-49922
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...
CVE-2022-49923
In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxpncisend nxpncisend will call nxpncii2cwrite, and only free skb when nxpncii2cwrite failed. However, even if the nxpncii2cwrite run succeeds, the skb will not be freed in nxpncii2cwrit...
CVE-2022-49923 nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxpncisend nxpncisend will call nxpncii2cwrite, and only free skb when nxpncii2cwrite failed. However, even if the nxpncii2cwrite run succeeds, the skb will not be freed in nxpncii2cwrit...