CVE-2026-98582

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received frame size st21nfcahcii2crepack trims a received frame at its EOF marker before removing byte stuffing. It then assumes the truncated frame contains the LLC header and two CRC bytes, and it...

EUVD-2026-103627

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received frame size st21nfcahcii2crepack trims a received frame at its EOF marker before removing byte stuffing. It then assumes the truncated frame contains the LLC header and two CRC bytes, and it...

CVE-2026-98582

The Linux kernel contains a vulnerability in the nfc: st21nfca component. The function st21nfca_hci_i2c_repack() incorrectly trims a received frame at its EOF marker before removing byte stuffing, leading to an out-of-bounds read. Specifically, a malformed frame can cause the unstuffing loop to r...

CVE-2026-98582 nfc: st21nfca: validate received frame size

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received frame size st21nfcahcii2crepack trims a received frame at its EOF marker before removing byte stuffing. It then assumes the truncated frame contains the LLC header and two CRC bytes, and it...