76 matches found
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca – A memory leak was fixed in the device probe, and the phy-pendingskb variable was properly freed after allocation. However, it was forgotten to be freed during the error handling and removal processes, resulting in...
CVE-2026-80823
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
AZL-99561 CVE-2026-80823 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
CVE-2026-80823
CVE-2026-80823 is a Linux kernel vulnerability in the nfc: st21nfca NFC driver. The function st21nfca_tm_recv_atr_req() validates that a received ATR_REQ frame meets a minimum size and that its self-declared length is at least the struct size, but never checks that the declared length does not ex...
CVE-2026-80823 nfc: st21nfca: validate ATR_REQ length against the received frame
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
CVE-2026-80823 nfc: st21nfca: validate ATR_REQ length against the received frame
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
CVE-2026-80823
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
EUVD-2026-71265
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
Linux Distros Unpatched Vulnerability : CVE-2026-80823
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE a...
CVE-2026-80823: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
PT-2026-85688
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR REQ length against the received frame st21nfca tm recv atr req checks that the received ATR REQ frame is at least ST21NFCA ATR REQ MIN SIZE and that the self-declared atr req-length is at least...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the drivers/nfc/st21nfca/se.c file within the Linux kernel, up to version 5.16.12, there are connectivity events received due to EVTTRANSACTION buffer overflows caused by untrusted length parameters...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001680)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001680 advisory. st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVTTRANSACTION buffer overflows because of untrusted length...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989489)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989489 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986710)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986710 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414435)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414435 advisory. st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVTTRANSACTION buffer overflows because of untrusted length...
Linux Distros Unpatched Vulnerability : CVE-2022-26490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - st21nfcaconnectivityeventreceived in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVTTRANSACTION buffer overflows because of untrusted leng...
Linux Distros Unpatched Vulnerability : CVE-2021-46924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy-pendingskb' is alloced when...
SUSE CVE-2022-49331
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously allocated memory. Add devmkfree to those failure paths...
DEBIAN-CVE-2022-49331
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling Error paths do not free previously allocated memory. Add devmkfree to those failure paths...