CVE-2026-63915

kernel: nfc: hci: fix out-of-bounds read in HCP header parsing

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) Host Controller Interface (HCI). A remote attacker, by sending a specially crafted 0-byte Host Controller Protocol (HCP) frame, could trigger an out-of-bounds read. This could lead to a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-125 · Out-of-bounds Read