Home/CVE/In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet
CVE

CVE-2026-43291

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet data Since commit 9c328f54741b ("net: nfc: nci: Add parameter validation for packet data") communication with nci nfc chips is not working any more. The mentioned commit tries to fix access of uninitialized data, but failed to understand that in some cases the data packet is of variable length and can therefore not be compared to the maximum packet length given by the sizeof(struct).

HIGH · CVSS 8.3 EPSS 0.00034
Schedule remediation
  • CVSS base score ≥ 7.0
Sigma rules0 YARA rules0
⬡

Weakness Classification

CWE-908Use of Uninitialized Resource
▤

Affected Products & Versions

7
linux kernel>= 5.15.195 and < 5.15.202
linux kernel>= 6.1.156 and < 6.1.165
linux kernel>= 6.6.112 and < 6.6.128
linux kernel>= 6.12.53 and < 6.12.75
linux kernel>= 6.17.3 and < 6.18
linux kernel>= 6.18 and < 6.18.16
linux kernel>= 6.19 and < 6.19.6
▣

Scoring & Timeline

8.3
HIGH · CVSS v3.1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
View on NVD
Attack Vector
Network Adjacent Local Physical
Attack Complexity
Low High
Privileges Required
None Low High
User Interaction
None Required
Scope
Unchanged Changed
Confidentiality
None Low High
Integrity
None Low High
Availability
None Low High
Published to NVD08 May 2026 · 02:16 PM
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
🔗

References & Sources

7
Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.
https://git.kernel.org/stable/c/3b91160e9a91b5a2662875417dc42dc5b0bf03eaPatch
https://git.kernel.org/stable/c/498fc5d0d650c77e87fcc73808d4f43240c21805Patch
https://git.kernel.org/stable/c/571dcbeb8e635182bb825ae758399831805693c2Patch
https://git.kernel.org/stable/c/a24a8a582da4426b2042e510a1080df84083b51dPatch
https://git.kernel.org/stable/c/ad058a4317db7fdb3f09caa6ed536d24a62ce6a0Patch
https://git.kernel.org/stable/c/c692db813a7e3b7c3c17d6e9a3ad2a018bf1142bPatch
Intelligence Graph · click any node to traverse
CVETechnique ActorTool Family
drag to reposition · click any node to traverse · button top-right enlarges
External lookups - second-class, for what we don’t hold ourselves
NVDCVE.orgCISAVulnersExploit-DBGitHub PoCVulnCheck KEVGreyNoise
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin