CVE-2026-98578
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix without checking that it exists, then accepts a one-byte remainder before reading data[1] as the DSFID. Require the prefix and at least two remaining bytes before copying the UID data and reading the DSFID.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 18, 2026
First seenOct 18, 2026
How to fix
Update
- Linux Linuxe47b2a350bb0ff123434ec5484c6dc3333b0727c, 57d183764f3002f9625ee4deeeb20716c519534e, 3af2ea4035581a1607d9830779c187a0c7e225aa, 9fa21b0f78adb514e3bd96a505ddb752e9727ff3, 6353dae51bc9b3cad13c9d890b53311a46c96b4e, fdd95e819d828c975aaeb258a3fed5dd7fd136d0, a86987d03a4d39acdbe4533d83db4d656ea36c59, 7f2ea5ed588c03d481f0301e6c3d4240132383fb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7974728094d35f38775417a26d8f30ea3602496a ≤ v < e47b2a350bb0ff123434ec5484c6dc3333b0727c, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < 57d183764f3002f9625ee4deeeb20716c519534e, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < 3af2ea4035581a1607d9830779c187a0c7e225aa, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < 9fa21b0f78adb514e3bd96a505ddb752e9727ff3, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < 6353dae51bc9b3cad13c9d890b53311a46c96b4e, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < fdd95e819d828c975aaeb258a3fed5dd7fd136d0, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < a86987d03a4d39acdbe4533d83db4d656ea36c59, 7974728094d35f38775417a26d8f30ea3602496a ≤ v < 7f2ea5ed588c03d481f0301e6c3d4240132383fb, 3.16 | e47b2a350bb0ff123434ec5484c6dc3333b0727c, 57d183764f3002f9625ee4deeeb20716c519534e, 3af2ea4035581a1607d9830779c187a0c7e225aa, 9fa21b0f78adb514e3bd96a505ddb752e9727ff3, 6353dae51bc9b3cad13c9d890b53311a46c96b4e, fdd95e819d828c975aaeb258a3fed5dd7fd136d0, a86987d03a4d39acdbe4533d83db4d656ea36c59, 7f2ea5ed588c03d481f0301e6c3d4240132383fb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.