{"id":"CVE-2026-98482","title":"kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (CVE-2026-98482)","summary":"A flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. The Logical Link Control Protocol (LLCP) implementation does not verify the length of incoming network packets before reading sequence information. An attacke…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-125","vendor":"Red Hat","product":"Linux","affected":["Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 3afdbebfee2ef7e9510880868cfb482cbffe6836","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 9b4086eb67a9a3b1ce69fef1b6793827363703ce","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 51b6d73373589abb9de4d84767b0db1bc8d395d9","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 066205553a0106565bcede934f5721c25ebd6e4e","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 18f60ee882403d5b48097f5f6ae45f794e4cc643","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 810f204ef8f61f0c930cf6b3280050b3ee6a8ae7","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 744e61bd06188d8bb068c26a461c252f242b05c9","Linux >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a < 273f9d667cde649f8de9d72b1303cc2f4b658c50","Linux 3.3"],"published":"2026-10-18","updated":"2026-10-20","sourceUpdated":"2026-10-20T11:40:50+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98482.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98482.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98482"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554900"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98482"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98482"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98482.mbox"},{"url":"https://git.kernel.org/stable/c/3afdbebfee2ef7e9510880868cfb482cbffe6836"},{"url":"https://git.kernel.org/stable/c/9b4086eb67a9a3b1ce69fef1b6793827363703ce"},{"url":"https://git.kernel.org/stable/c/51b6d73373589abb9de4d84767b0db1bc8d395d9"},{"url":"https://git.kernel.org/stable/c/066205553a0106565bcede934f5721c25ebd6e4e"},{"url":"https://git.kernel.org/stable/c/18f60ee882403d5b48097f5f6ae45f794e4cc643"},{"url":"https://git.kernel.org/stable/c/810f204ef8f61f0c930cf6b3280050b3ee6a8ae7"},{"url":"https://git.kernel.org/stable/c/744e61bd06188d8bb068c26a461c252f242b05c9"},{"url":"https://git.kernel.org/stable/c/273f9d667cde649f8de9d72b1303cc2f4b658c50"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00211,"epssPercentile":0.11208,"ingestedAt":"2026-10-18T15:45:12.295Z","slug":"CVE-2026-98482","body":"## Overview\n\nA flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. The Logical Link Control Protocol (LLCP) implementation does not verify the length of incoming network packets before reading sequence information. An attacker within NFC radio range could exploit this by transmitting truncated packets, causing the kernel to read uninitialized memory. This flaw may lead to unexpected connection behavior or a Denial of Service (DoS).\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98482.json)\n\n**kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":225503,"id":"CVE-2026-98482","ts":1792498273509,"field":"cvss","old":null,"new":"6.5"},{"seq":225502,"id":"CVE-2026-98482","ts":1792498273509,"field":"severity","old":"none","new":"medium"}]}