{"id":"CVE-2026-98480","title":"kernel: nfc: trf7970a: power down on startup RX gain failure (CVE-2026-98480)","summary":"A flaw was found in the Linux kernel's Near Field Communication (NFC) TRF7970A driver. This vulnerability can lead to a denial of service (DoS) or improper hardware state due to unreleased power resources. If a communication error occurs w…","severity":"low","cvss":1.9,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cvssSource":"vendor","cwe":"CWE-772","vendor":"Red Hat","product":"Linux","affected":["Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < cc444e4ad43461374dd128573eccb8979d2adb4c","Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < 6ef70d790425e76b42c69e416ee78c62bdc37d00","Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < d2acbde7e67df44efa8f0963462d1192e7694ffc","Linux 6.17"],"published":"2026-10-18","updated":"2026-10-20","sourceUpdated":"2026-10-20T11:42:04+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98480"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554839"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98480"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98480"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98480.mbox"},{"url":"https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c"},{"url":"https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00"},{"url":"https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00198,"epssPercentile":0.09468,"ingestedAt":"2026-10-18T15:45:12.297Z","slug":"CVE-2026-98480","body":"## Overview\n\nA flaw was found in the Linux kernel's Near Field Communication (NFC) TRF7970A driver. This vulnerability can lead to a denial of service (DoS) or improper hardware state due to unreleased power resources. If a communication error occurs while configuring receiver gain during device startup or system resume, the driver exits without powering off the hardware. Consequently, power regulators and control lines remain enabled, resulting in a persistent resource leak.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json)\n\n**kernel: nfc: trf7970a: power down on startup RX gain failure** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-20.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":10,"depthScoreParts":{"impact":10.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":225461,"id":"CVE-2026-98480","ts":1792498259957,"field":"cvss","old":null,"new":"1.9"},{"seq":225460,"id":"CVE-2026-98480","ts":1792498259957,"field":"severity","old":"none","new":"low"}]}