CVE-2026-98576
Received
Received - Intake
Linux Kernel Slab Out-of-Bounds Read in NFC LLCP
Vulnerability report for CVE-2026-98576, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: fix slab-out-of-bounds reads when logging service names
nfc_llcp_wks_sap() and nfc_llcp_build_sdreq_tlv() pass non-null-
terminated strings to pr_debug() using the %s format specifier.
The buffers are allocated via kmemdup() or come from netlink
attributes and are not guaranteed to be null-terminated, causing
__dynamic_pr_debug() to read beyond the allocated region:
KASAN: slab-out-of-bounds Read in __dynamic_pr_debug
Fix both call sites by using %.*s with the explicit length to limit
the output to the actual length of the string.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | d9b8d8e19b073096d3609bbd60f82148d128b555 |
| Linux | Linux | 3.10 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
