CVE-2026-43291

kernel: net: nfc: nci: Fix parameter validation for packet data

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) NCI subsystem. Incorrect parameter validation for variable-length packet data can lead to communication failures with NCI NFC chips. This issue, stemming from an attempt to prevent access to uninitialized data, results in a Denial of Service (DoS) where NFC communication ceases to function.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-130 · Improper Handling of Length Parameter Inconsistency