CVE-2026-98576
N/AIn the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when logging service names nfc_llcp_wks_sap() and nfc_llcp_build_sdreq_tlv() pass non-null- terminated strings to pr_debug() using the %s format specifier. The buffers are allocated via kmemdup() or come from netlink attributes and are not guaranteed to be null-terminated, causing __dynamic_pr_debug() to read beyond the allocated region: KASAN: slab-out-of-bounds Read in __dynamic_pr_debug Fix both call sites by using %.*s with the explicit length to limit the output to the actual length of the string.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 11th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept & exploit code
- github-search Search GitHub for public PoC repos
Test against your own equipment
curl -s https://vulnpedia.com/cve/CVE-2026-98576/poc.jsonMachine-readable PoC index for this CVE (for automation).Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-98576/poc.json
References
Technical & other
- https://git.kernel.org/stable/c/75f7c5a42fa1483f5912279a749417c284ad708f
- https://git.kernel.org/stable/c/6d4ca872830e46fcca9c086bf19fa9bd2faf09d2
- https://git.kernel.org/stable/c/a143f7835faa4fe0178448289feea4f84eeee8d6
- https://git.kernel.org/stable/c/75bfd9ef4da2fb49dac1f19880d2ac4ccd07b45b
- https://git.kernel.org/stable/c/8afb6c194f5781798d3ab3edf243cf5a24a9d1f9
- https://git.kernel.org/stable/c/8978dff632519712d1fa432991e1f2e857f90239
- https://git.kernel.org/stable/c/4262b12277a3e056c95fc49e9c4d7bd97035d16c
- https://git.kernel.org/stable/c/7dcf371a35632f035baf77bcf2c129165f772ce4