{"id":"CVE-2026-98483","title":"kernel: nfc: fix use-after-free in nfc_get_local_general_bytes (CVE-2026-98483)","summary":"A flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. A reference counting error in the nfc_get_local_general_bytes() function causes memory to be freed prematurely while callers still access the returned pointer…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-825","vendor":"Red Hat","product":"Linux","affected":["Linux >= 96f2c6f272ec04083d828de46285a7d7b17d1aad < 25bfa673adc70189c0bc872940421ae59f789cf6","Linux >= fc8429f8d86801f092fbfbd257c3af821ac0dcd3 < 2b31d0cc95856c856ada91f943fb14dfdf29a923","Linux >= 425d9d3a92df7d96b3cfb7ee5c240293a21cbde3 < c40f61a6a413f3eaf028e5fe367fd9749e503ab0","Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < 19bcfc2a56d0b82919079b5424c5a9a0ac897dcf","Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < d8c929e9afdbc33b1876ecb97a517e850449b5bd","Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < 841af260ff477f6191872bc3b2e15488615c1827","Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < 9ede11e12f965ace97c4e0f606667f24fb41e7e1","Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < dcab71a7011918f6fdba7adcec02d217dcb84b8d","Linux dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548","Linux b3ad46e155a6d91b36c6e892019a43e3ef3c696d","Linux e5207c1d69b1a9707615ab6ff9376e59fc096815","Linux >= 5.10.188 < 5.10.271","Linux >= 5.15.121 < 5.15.222","Linux >= 6.1.39 < 6.1.189","Linux >= 5.4.251 < 5.5","Linux >= 6.3.13 < 6.4","Linux >= 6.4.4 < 6.5","Linux 6.5"],"published":"2026-10-18","updated":"2026-10-20","sourceUpdated":"2026-10-20T11:40:51+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98483"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554891"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98483"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98483"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98483.mbox"},{"url":"https://git.kernel.org/stable/c/25bfa673adc70189c0bc872940421ae59f789cf6"},{"url":"https://git.kernel.org/stable/c/2b31d0cc95856c856ada91f943fb14dfdf29a923"},{"url":"https://git.kernel.org/stable/c/c40f61a6a413f3eaf028e5fe367fd9749e503ab0"},{"url":"https://git.kernel.org/stable/c/19bcfc2a56d0b82919079b5424c5a9a0ac897dcf"},{"url":"https://git.kernel.org/stable/c/d8c929e9afdbc33b1876ecb97a517e850449b5bd"},{"url":"https://git.kernel.org/stable/c/841af260ff477f6191872bc3b2e15488615c1827"},{"url":"https://git.kernel.org/stable/c/9ede11e12f965ace97c4e0f606667f24fb41e7e1"},{"url":"https://git.kernel.org/stable/c/dcab71a7011918f6fdba7adcec02d217dcb84b8d"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00216,"epssPercentile":0.12015,"ingestedAt":"2026-10-18T15:45:12.295Z","slug":"CVE-2026-98483","body":"## Overview\n\nA flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. A reference counting error in the nfc_get_local_general_bytes() function causes memory to be freed prematurely while callers still access the returned pointer. A local attacker could exploit this use-after-free vulnerability during NFC operations to cause a denial of service (DoS) or potentially execute arbitrary code.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json)\n\n**kernel: nfc: fix use-after-free in nfc_get_local_general_bytes** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":225499,"id":"CVE-2026-98483","ts":1792498272351,"field":"cvss","old":null,"new":"5.5"},{"seq":225498,"id":"CVE-2026-98483","ts":1792498272351,"field":"severity","old":"none","new":"medium"}]}