CVE-2026-31622
kernel: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's NFC (Near Field Communication) digital subsystem. A malicious peer device can exploit this vulnerability by sending specially crafted NFC-A anti-collision cascade responses. This allows the peer to exceed the intended cascade depth, leading to a heap overflow by writing past the allocated buffer for the nfc_target. This memory corruption can result in a denial of service or potentially arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')