CVE-2026-43032: NFC: pn533: bound the UART receive buffer
In the Linux kernel, the following vulnerability has been resolved:
NFC: pn533: bound the UART receive buffer
pn532receivebuf() appends every incoming byte to dev->recvskb and only resets the buffer after pn532uartrxisframe() recognizes a complete frame. A continuous stream of bytes without a valid PN532 frame header therefore keeps growing the skb until skbputu8() hits the tail limit.
Drop the accumulated partial frame once the fixed receive buffer is full so malformed UART traffic cannot grow the skb past PN532UARTSKBBUFFLEN.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43032?
CVE-2026-43032 has not been assigned a severity rating as it is a specific buffer management issue in the NFC pn533 driver.
How do I fix CVE-2026-43032?
To fix CVE-2026-43032, users should update their Linux kernel to the latest version where the vulnerability has been resolved.
What type of vulnerability is CVE-2026-43032?
CVE-2026-43032 is a buffer management vulnerability related to the UART receive buffer in the NFC pn533 driver.
Which software is affected by CVE-2026-43032?
CVE-2026-43032 affects the Linux kernel specifically in the NFC pn533 driver.
What issue does CVE-2026-43032 address?
CVE-2026-43032 addresses the issue of bounding the UART receive buffer to prevent potential overflow.