All vulnerabilities
CVE-2026-98578

Linux: nfc: st21nfca: validate ISO15693 inventory length

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in57d183764f3002f9625ee4deeeb20716c519534eAlso 3af2ea4035581a1607d9830779c187a0c7e225aa, 9fa21b0f78adb514e3bd96a505ddb752e9727ff3 and 2 moreCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 57d183764f3002f9625ee4deeeb20716c519534eLinuxCVE List
  • 3af2ea4035581a1607d9830779c187a0c7e225aaLinuxCVE List
  • 9fa21b0f78adb514e3bd96a505ddb752e9727ff3LinuxCVE List
  • 6353dae51bc9b3cad13c9d890b53311a46c96b4eLinuxCVE List
  • 7f2ea5ed588c03d481f0301e6c3d4240132383fbLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: st21nfca: validate ISO15693 inventory length

The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data[1] as the DSFID.

Require the prefix and at least two remaining bytes before copying the UID data and reading the DSFID.

Text from CVE List

Affected versions 18

  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before e47b2a350bb0ff123434ec5484c6dc3333b0727cCVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before 57d183764f3002f9625ee4deeeb20716c519534eCVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before 3af2ea4035581a1607d9830779c187a0c7e225aaCVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before 9fa21b0f78adb514e3bd96a505ddb752e9727ff3CVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before 6353dae51bc9b3cad13c9d890b53311a46c96b4eCVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before fdd95e819d828c975aaeb258a3fed5dd7fd136d0CVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before a86987d03a4d39acdbe4533d83db4d656ea36c59CVE List
  • Linuxaffected: 7974728094d35f38775417a26d8f30ea3602496a before 7f2ea5ed588c03d481f0301e6c3d4240132383fbCVE List
  • Linuxaffected: 3.16CVE List
  • Linuxunaffected: all versions before 3.16CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8