CVE-2026-98583: nfc: nfcmrvl: validate helper command length before pull
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
nfc: nfcmrvl: validate helper command length before pull
The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach the data access before the malformed packet is rejected.
Validate the complete helper command length before stripping the NCI data header.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel nfc:nfcmrvl firmware download receive path, validate the complete helper command length before stripping the NCI data header.
Event History
Oct 18, 2026
CVE Published
via MITRE·03:18 PM
Data Sourced
via MITRE·03:18 PM
Description
Data Sourced
via NVD·04:17 PM
Description