CVE-2026-98578
Received Received - Intake

NFC ISO15693 Length Validation Flaw in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data[1] as the DSFID. Require the prefix and at least two remaining bytes before copying the UID data and reading the DSFID.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98578
EUVD
EUVD-2026-103623

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 7974728094d35f38775417a26d8f30ea3602496a
Linux Linux 3.16

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's NFC (Near Field Communication) subsystem, specifically in the st21nfca driver. It involves improper validation of ISO15693 inventory length during NFC communication. The issue occurs when the code removes a two-byte prefix without checking its existence, then processes a one-byte remainder incorrectly. This can lead to reading uninitialized memory or incorrect data handling.

Impact Analysis

This vulnerability could allow an attacker with proximity to a vulnerable NFC device to cause a denial of service (system crash) or potentially execute arbitrary code with kernel privileges. It may also lead to information disclosure if sensitive data is read from memory.

Mitigation Strategies

Apply the latest Linux kernel security patches that address CVE-2026-98578. Update the kernel to a version containing the fix for the ISO15693 inventory length validation issue in the st21nfca NFC driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98578. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart