01 Record

CVE-2026-98575

nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-18 15:18Z10 DAYS AGO

Last updated

2026-10-19 09:22Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

b9d4e11a46722c2fbfc665e403b1309b92816be0624d1a0fac64b8de45eb9101

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < 8db3b1e012a8b25078dfa1efabe3d0cd2916dcba, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < 74b3fbc60907ee97e3af3249091f57351b53a6d6, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < 8a0f1bb790d964893db7fc59febda9a534db07b3, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < ea82b7576793219fa10a8b545f8338998b2a9ce2, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < 72b8b2126e854d6756a1aa4bdc66d7457b832294, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < e72cbedc4596e808d22dd2b9fff666ece76f8dd6, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < 2450a388367231fb7dd798538f393af227c00c4d, 9815c7cf22daceabfb919ddcd6f2c80e049c1fbc to < b61732f47316d45f27706db7812950145d3327b5, 4.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8db3b1e012a8b25078dfa1efabe3d0cd2916dcba
git.kernel.orghttps://git.kernel.org/stable/c/74b3fbc60907ee97e3af3249091f57351b53a6d6
git.kernel.orghttps://git.kernel.org/stable/c/8a0f1bb790d964893db7fc59febda9a534db07b3
git.kernel.orghttps://git.kernel.org/stable/c/ea82b7576793219fa10a8b545f8338998b2a9ce2
git.kernel.orghttps://git.kernel.org/stable/c/72b8b2126e854d6756a1aa4bdc66d7457b832294
git.kernel.orghttps://git.kernel.org/stable/c/e72cbedc4596e808d22dd2b9fff666ece76f8dd6
git.kernel.orghttps://git.kernel.org/stable/c/2450a388367231fb7dd798538f393af227c00c4d
git.kernel.orghttps://git.kernel.org/stable/c/b61732f47316d45f27706db7812950145d3327b5

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.