---
id: CVE-2026-98480
title: 'kernel: nfc: trf7970a: power down on startup RX gain failure (CVE-2026-98480)'
summary: >-
  A flaw was found in the Linux kernel's Near Field Communication (NFC) TRF7970A
  driver. This vulnerability can lead to a denial of service (DoS) or improper
  hardware state due to unreleased power resources. If a communication error
  occurs w…
severity: low
cvss: 1.9
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L'
cvssSource: vendor
cwe: CWE-772
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    cc444e4ad43461374dd128573eccb8979d2adb4c
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    6ef70d790425e76b42c69e416ee78c62bdc37d00
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    d2acbde7e67df44efa8f0963462d1192e7694ffc
  - Linux 6.17
published: '2026-10-18'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T11:42:04+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98480'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2554839'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98480'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98480'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98480.mbox
  - url: 'https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c'
  - url: 'https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00'
  - url: 'https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00198
epssPercentile: 0.09468
ingestedAt: '2026-10-18T15:45:12.297Z'
---

## Overview

A flaw was found in the Linux kernel's Near Field Communication (NFC) TRF7970A driver. This vulnerability can lead to a denial of service (DoS) or improper hardware state due to unreleased power resources. If a communication error occurs while configuring receiver gain during device startup or system resume, the driver exits without powering off the hardware. Consequently, power regulators and control lines remain enabled, resulting in a persistent resource leak.

## Vendor advisories

- **Red Hat VEX** · Low · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98480.json)

**kernel: nfc: trf7970a: power down on startup RX gain failure** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-20.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Refer to the advisory for fix availability.