CVE Database›Document archive›CVE-2026-43098

CVE-2026-43098

kernel: nfc: s3fwrn5: allocate rx skb before consuming bytes

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem, specifically within the s3fwrn5 driver. This vulnerability occurs when the driver attempts to consume bytes into a receive buffer (recv_skb) without ensuring a new buffer is allocated if the previous one was delivered. If the allocation of a new buffer fails, the recv_skb pointer can become NULL, leading to a NULL dereference during subsequent operations. A local attacker could exploit this memory corruption vulnerability to cause a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference