CVE-2026-43291: net: nfc: nci: Fix parameter validation for packet data
In the Linux kernel, the following vulnerability has been resolved:
net: nfc: nci: Fix parameter validation for packet data
Since commit 9c328f54741b ("net: nfc: nci: Add parameter validation for packet data") communication with nci nfc chips is not working any more.
The mentioned commit tries to fix access of uninitialized data, but failed to understand that in some cases the data packet is of variable length and can therefore not be compared to the maximum packet length given by the sizeof(struct).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43291?
CVE-2026-43291 has been classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2026-43291?
To fix CVE-2026-43291, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What impact does CVE-2026-43291 have on my system?
CVE-2026-43291 may allow attackers to exploit improper parameter validation in NFC communication, potentially compromising system security.
Which versions of the Linux kernel are affected by CVE-2026-43291?
CVE-2026-43291 affects various versions of the Linux kernel prior to the patch implementation included in recent updates.
Is CVE-2026-43291 being actively exploited in the wild?
As of now, there have been no reports indicating that CVE-2026-43291 is actively being exploited in the wild.