CVE-2026-98578
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data[1] as the DSFID. Require the prefix and at least two remaining bytes before copying the UID data and reading the DSFID.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-10-18 16:17:10.223000
Last modified
2026-10-19 10:19:17.060000
View original CVE JSON
{
"id": "CVE-2026-98578",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-10-18T16:17:10.223",
"lastModified": "2026-10-19T10:19:17.060",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: st21nfca: validate ISO15693 inventory length\n\nThe ISO15693 inventory helper removes a two-byte prefix without checking\nthat it exists, then accepts a one-byte remainder before reading data[1] as\nthe DSFID.\n\nRequire the prefix and at least two remaining bytes before copying the UID\ndata and reading the DSFID."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/nfc/st21nfca/core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "e47b2a350bb0ff123434ec5484c6dc3333b0727c",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "57d183764f3002f9625ee4deeeb20716c519534e",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "3af2ea4035581a1607d9830779c187a0c7e225aa",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "9fa21b0f78adb514e3bd96a505ddb752e9727ff3",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "6353dae51bc9b3cad13c9d890b53311a46c96b4e",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "fdd95e819d828c975aaeb258a3fed5dd7fd136d0",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "a86987d03a4d39acdbe4533d83db4d656ea36c59",
"versionType": "git",
"status": "affected"
},
{
"version": "7974728094d35f38775417a26d8f30ea3602496a",
"lessThan": "7f2ea5ed588c03d481f0301e6c3d4240132383fb",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/nfc/st21nfca/core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.16",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.16",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.271",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.222",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.189",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.158",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.112",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.55",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.9",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/3af2ea4035581a1607d9830779c187a0c7e225aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/57d183764f3002f9625ee4deeeb20716c519534e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6353dae51bc9b3cad13c9d890b53311a46c96b4e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7f2ea5ed588c03d481f0301e6c3d4240132383fb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9fa21b0f78adb514e3bd96a505ddb752e9727ff3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a86987d03a4d39acdbe4533d83db4d656ea36c59",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e47b2a350bb0ff123434ec5484c6dc3333b0727c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fdd95e819d828c975aaeb258a3fed5dd7fd136d0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}