{"id":"CVE-2026-98577","revision":"cef81bb337c140dda67f28bc490bde07","records":[{"revision":"cef81bb337c140dda67f28bc490bde07","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98577","aliases":[],"title":"nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()\n\nnfc_llcp_wks_sap() compares only service_name_len bytes, so a short\nservice_name like \"u\" matches longer WKS strings like \"urn:nfc:sn:snep\".\nFix by requiring exact length match before strncmp().","state":0,"publishedAt":"2026-10-18T15:18:47.635+00:00","modifiedAt":"2026-10-19T09:22:02.632+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/nfc/llcp_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"0c83a8a45fed256ccc5fe7160b436b671fc79fb8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"aa555ed5ed0d15efbaf27e0e9f152a6df715278a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"32b5f0b338bf59391a1cff9a6190a72c4d2c1ba8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"6fad2c34d451d11a9f3f946cae1105fee91d96b8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"bf41af8f910cbb5d776a1dfa0671d31a7e262e28\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"f234197f3bda3aea5d4b1e591d6bcb3660a8b3fc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"0a0412745c86acd089c6460da715ab966b1615e7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d646960f7986fefb460a2b062d5ccc8ccfeacc3a\",\n                            \"lessThan\": \"408cff6bd60636df201274d320edfdfde9ed41db\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/nfc/llcp_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.55\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.9\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/0c83a8a45fed256ccc5fe7160b436b671fc79fb8","https://git.kernel.org/stable/c/aa555ed5ed0d15efbaf27e0e9f152a6df715278a","https://git.kernel.org/stable/c/32b5f0b338bf59391a1cff9a6190a72c4d2c1ba8","https://git.kernel.org/stable/c/6fad2c34d451d11a9f3f946cae1105fee91d96b8","https://git.kernel.org/stable/c/bf41af8f910cbb5d776a1dfa0671d31a7e262e28","https://git.kernel.org/stable/c/f234197f3bda3aea5d4b1e591d6bcb3660a8b3fc","https://git.kernel.org/stable/c/0a0412745c86acd089c6460da715ab966b1615e7","https://git.kernel.org/stable/c/408cff6bd60636df201274d320edfdfde9ed41db"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98577","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98577","identifiers":["CVE-2026-98577"]},"retained":false,"historicalAffected":[]}],"coverage":[]}