19 matches found
SUSE CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577
A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. In the Logical Link Control Protocol LLCP implementation, the kernel validates service names using only the length of the provided name instead of verifying an exact match. A local attacker could exploit this flaw by...
Linux Distros Unpatched Vulnerability : CVE-2026-98577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like u matches longe...
DEBIAN-CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
AZL-109131 CVE-2026-98577 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
UBUNTU-CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577 nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577
The Linux kernel contains a vulnerability in the nfc_llcp_wks_sap() function, which allows for WKS SAP hijacking . The root cause is that the function compares only service_name_len bytes, leading to a prefix match where a short service name (e.g., "u") incorrectly matches longer WKS strings (e.g...
EUVD-2026-103622
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577 nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
CVE-2026-98577
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
PT-2026-116796
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Logical Link Control Protocol LLCP of the NFC subsystem where the nfc llcp wks sap function performs a prefix match instead of an exact match. Because the function...
PT-2026-116795
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC LLCP component where the functions nfc llcp wks sap and nfc llcp build sdreq tlv pass non-null-terminated strings to pr debug using the %s format specifier...
PT-2026-128586
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when logging service names nfc llcp wks sap and nfc llcp build sdreq tlv pass non-null- terminated strings to pr debug using the %s format specifier. The buffers are allocated via kmemdup o...
CVE-2026-98577: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfcllcpwkssap nfcllcpwkssap compares only servicenamelen bytes, so a short servicename like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exact length...
PT-2026-128537
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc llcp wks sap nfc llcp wks sap compares only service name len bytes, so a short service name like "u" matches longer WKS strings like "urn:nfc:sn:snep". Fix by requiring exa...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.3 contains a security vulnerability. This vulnerability stems from the nfcllcpwkssap function, which only compares the servicenamelen bytes. A shorter servicename may match the prefix of the longer WKS string, potentially leading to WKS SAP hijacking...