CVE-2026-98583
2026-10-18
16h17 +00:00
16h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In the Linux kernel, the following vulnerability has been resolved:
nfc: nfcmrvl: validate helper command length before pull
The firmware download receive path removes the NCI data header and
reads the helper command before validating the remaining packet length.
A short frame can therefore reach the data access before the malformed
packet is rejected.
Validate the complete helper command length before stripping the NCI
data header.
