---
id: CVE-2026-98483
title: >-
  kernel: nfc: fix use-after-free in nfc_get_local_general_bytes
  (CVE-2026-98483)
summary: >-
  A flaw was found in the Linux kernel's Near Field Communication (NFC)
  subsystem. A reference counting error in the nfc_get_local_general_bytes()
  function causes memory to be freed prematurely while callers still access the
  returned pointer…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe: CWE-825
vendor: Red Hat
product: Linux
affected:
  - >-
    Linux >= 96f2c6f272ec04083d828de46285a7d7b17d1aad <
    25bfa673adc70189c0bc872940421ae59f789cf6
  - >-
    Linux >= fc8429f8d86801f092fbfbd257c3af821ac0dcd3 <
    2b31d0cc95856c856ada91f943fb14dfdf29a923
  - >-
    Linux >= 425d9d3a92df7d96b3cfb7ee5c240293a21cbde3 <
    c40f61a6a413f3eaf028e5fe367fd9749e503ab0
  - >-
    Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 <
    19bcfc2a56d0b82919079b5424c5a9a0ac897dcf
  - >-
    Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 <
    d8c929e9afdbc33b1876ecb97a517e850449b5bd
  - >-
    Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 <
    841af260ff477f6191872bc3b2e15488615c1827
  - >-
    Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 <
    9ede11e12f965ace97c4e0f606667f24fb41e7e1
  - >-
    Linux >= 6709d4b7bc2e079241fdef15d1160581c5261c10 <
    dcab71a7011918f6fdba7adcec02d217dcb84b8d
  - Linux dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548
  - Linux b3ad46e155a6d91b36c6e892019a43e3ef3c696d
  - Linux e5207c1d69b1a9707615ab6ff9376e59fc096815
  - Linux >= 5.10.188 < 5.10.271
  - Linux >= 5.15.121 < 5.15.222
  - Linux >= 6.1.39 < 6.1.189
  - Linux >= 5.4.251 < 5.5
  - Linux >= 6.3.13 < 6.4
  - Linux >= 6.4.4 < 6.5
  - Linux 6.5
published: '2026-10-18'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T11:40:51+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98483'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2554891'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98483'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98483'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98483.mbox
  - url: 'https://git.kernel.org/stable/c/25bfa673adc70189c0bc872940421ae59f789cf6'
  - url: 'https://git.kernel.org/stable/c/2b31d0cc95856c856ada91f943fb14dfdf29a923'
  - url: 'https://git.kernel.org/stable/c/c40f61a6a413f3eaf028e5fe367fd9749e503ab0'
  - url: 'https://git.kernel.org/stable/c/19bcfc2a56d0b82919079b5424c5a9a0ac897dcf'
  - url: 'https://git.kernel.org/stable/c/d8c929e9afdbc33b1876ecb97a517e850449b5bd'
  - url: 'https://git.kernel.org/stable/c/841af260ff477f6191872bc3b2e15488615c1827'
  - url: 'https://git.kernel.org/stable/c/9ede11e12f965ace97c4e0f606667f24fb41e7e1'
  - url: 'https://git.kernel.org/stable/c/dcab71a7011918f6fdba7adcec02d217dcb84b8d'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00216
epssPercentile: 0.12015
ingestedAt: '2026-10-18T15:45:12.295Z'
---

## Overview

A flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. A reference counting error in the nfc_get_local_general_bytes() function causes memory to be freed prematurely while callers still access the returned pointer. A local attacker could exploit this use-after-free vulnerability during NFC operations to cause a denial of service (DoS) or potentially execute arbitrary code.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-20 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98483.json)

**kernel: nfc: fix use-after-free in nfc_get_local_general_bytes** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Refer to the advisory for fix availability.