All vulnerabilities
CVE-2026-98583

Linux: nfc: nfcmrvl: validate helper command length before pull

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in842c0603cfa49530ef081f181a2ddbba77a37231Also 4d4601e182c8567329be7d919669ec4d847ddd93, 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c and 1 moreCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 842c0603cfa49530ef081f181a2ddbba77a37231LinuxCVE List
  • 4d4601e182c8567329be7d919669ec4d847ddd93LinuxCVE List
  • 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3cLinuxCVE List
  • 686f942332b1667f13f3b8d6a2f50bcfbf42e277LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: nfcmrvl: validate helper command length before pull

The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach the data access before the malformed packet is rejected.

Validate the complete helper command length before stripping the NCI data header.

Text from CVE List

Affected versions 18

  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before 842c0603cfa49530ef081f181a2ddbba77a37231CVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before e4b012240c8aaf57cec192234c24e0db5f531ffaCVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before f15ad9d6e9173a037587dded77c904fdae8df380CVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9CVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before 4d4601e182c8567329be7d919669ec4d847ddd93CVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before ed2e00bb22c73156bf8030b6204deabb25cf4eb5CVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before 6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3cCVE List
  • Linuxaffected: 3194c6870158e305dac2af52f83681e9cb67280f before 686f942332b1667f13f3b8d6a2f50bcfbf42e277CVE List
  • Linuxaffected: 4.4CVE List
  • Linuxunaffected: all versions before 4.4CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8