{"id":"CVE-2026-98480","revision":"ee5957dba79a4f15b3be87475a7a2219","records":[{"revision":"ee5957dba79a4f15b3be87475a7a2219","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98480","aliases":[],"title":"nfc: trf7970a: power down on startup RX gain failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: trf7970a: power down on startup RX gain failure\n\ntrf7970a_startup() powers up the device before applying the optional RX\ngain reduction. If the register read or write fails, it returns without\nundoing that power-up. Probe's unwind only drops the separate regulator\nreferences acquired by probe, leaving the additional VIN enable from\nstartup unbalanced. The system resume caller also has no power-down on\nthis error.\n\nCall trf7970a_power_down() before returning the RX gain error to deassert\nthe enable GPIOs, release the startup VIN reference and restore the\npowered-off state. Runtime PM has not been enabled yet, so the full\nshutdown helper is not appropriate here. Preserve the original SPI error.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code.","state":0,"publishedAt":"2026-10-18T15:15:54.528+00:00","modifiedAt":"2026-10-19T09:20:17.774+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nfc/trf7970a.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5d69351820eab6be1d298af21aedd18be5e5a11a\",\n                            \"lessThan\": \"cc444e4ad43461374dd128573eccb8979d2adb4c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d69351820eab6be1d298af21aedd18be5e5a11a\",\n                            \"lessThan\": \"6ef70d790425e76b42c69e416ee78c62bdc37d00\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d69351820eab6be1d298af21aedd18be5e5a11a\",\n                            \"lessThan\": \"d2acbde7e67df44efa8f0963462d1192e7694ffc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nfc/trf7970a.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.55\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.9\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c","https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00","https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98480","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98480","identifiers":["CVE-2026-98480"]},"retained":false,"historicalAffected":[]}],"coverage":[]}