CVE-2026-98578

nfc: st21nfca: validate ISO15693 inventory length

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: st21nfca: validate ISO15693 inventory length

The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data[1] as the DSFID.

Require the prefix and at least two remaining bytes before copying the UID data and reading the DSFID.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7974728094d35f38775417a26d8f30ea3602496a to before e47b2a350bb0ff123434ec5484c6dc3333b0727cAffected 7974728094d35f38775417a26d8f30ea3602496a to before 57d183764f3002f9625ee4deeeb20716c519534eAffected 7974728094d35f38775417a26d8f30ea3602496a to before 3af2ea4035581a1607d9830779c187a0c7e225aaAffected 7974728094d35f38775417a26d8f30ea3602496a to before 9fa21b0f78adb514e3bd96a505ddb752e9727ff3Affected 7974728094d35f38775417a26d8f30ea3602496a to before 6353dae51bc9b3cad13c9d890b53311a46c96b4eAffected 7974728094d35f38775417a26d8f30ea3602496a to before fdd95e819d828c975aaeb258a3fed5dd7fd136d0Affected 7974728094d35f38775417a26d8f30ea3602496a to before a86987d03a4d39acdbe4533d83db4d656ea36c59Affected 7974728094d35f38775417a26d8f30ea3602496a to before 7f2ea5ed588c03d481f0301e6c3d4240132383fbAffected
LinuxLinux	3.16Affected before 3.16Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.2.9 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7974728094d35f38775417a26d8f30ea3602496a to before e47b2a350bb0ff123434ec5484c6dc3333b0727cAffected
7974728094d35f38775417a26d8f30ea3602496a to before 57d183764f3002f9625ee4deeeb20716c519534eAffected
7974728094d35f38775417a26d8f30ea3602496a to before 3af2ea4035581a1607d9830779c187a0c7e225aaAffected
7974728094d35f38775417a26d8f30ea3602496a to before 9fa21b0f78adb514e3bd96a505ddb752e9727ff3Affected
7974728094d35f38775417a26d8f30ea3602496a to before 6353dae51bc9b3cad13c9d890b53311a46c96b4eAffected
7974728094d35f38775417a26d8f30ea3602496a to before fdd95e819d828c975aaeb258a3fed5dd7fd136d0Affected
7974728094d35f38775417a26d8f30ea3602496a to before a86987d03a4d39acdbe4533d83db4d656ea36c59Affected
7974728094d35f38775417a26d8f30ea3602496a to before 7f2ea5ed588c03d481f0301e6c3d4240132383fbAffected

LinuxLinux

3.16Affected
before 3.16Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.2.9 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.