Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990805 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context...

Android malware steals your card details and PIN to make instant ATM withdrawals

The Polish Computer Emergency Response Team CERT Polska analyzed a new Android-based malware that uses NFC technology to perform unauthorized ATM cash withdrawals and drain victims' bank accounts. Researchers found that the malware, called NGate, lets attackers withdraw cash from ATMs Automated...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990153 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvlplaydeferred Similar to the handling of playdeferred in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990350 advisory. In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989544 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Wait for outurb's completion in pn533usbsendframe Fix a use-after-free that occurs in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989265)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989265 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989649 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989231)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989231 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails then...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988790 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100sendcomplete Syzbot reported UAF in port100sendcomplet...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990093 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989225 advisory. In the Linux kernel, the following vulnerability has been resolved: NFC: NULL out the dev-rfkill to prevent UAF Commit 3e3b5dfcd16a NFC: reorder the logic in...

CVE-2025-11998 HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

EUVD-2025-37031

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event...

PT-2025-44422

Name of the Vulnerable Software and Affected Versions HP Card Readers B Models X3D03B & Y7C05B Description HP Card Readers B Models X3D03B and Y7C05B may disclose information, potentially allowing a prior user’s identity to be inherited. This can occur when a Near Field Communication NFC device,...

net: nfc: nci: Add parameter validation for packet data

...

SUSE CVE-2025-40043

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...

CVE-2025-40043

CVE-2025-40043 relates to a Linux kernel issue in net: nfc: nci where input validation was insufficient in handling packet data. Syzbot found an uninitialized value bug in nci_init_req caused by limited validation in nic_valid_size(), which compared skb->len (user-provided size) to the buffer’...

CVE-2025-40043 net: nfc: nci: Add parameter validation for packet data

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...

Linux Distros Unpatched Vulnerability : CVE-2025-40043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7...

Siemens SIMATIC Devices Out-of-bounds Write (CVE-2025-21735)

NFC: nci: Add bounds checking in ncihcicreatepipe This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503411; scriptversion"1.2";...