CVE Explorer

CVE-2026-43032

In the Linux kernel, the following vulnerability has been resolved: NFC: pn533: bound the UART receive buffer pn532_receive_buf() appends every incoming byte to dev->recv_skb and only resets the buffer after pn532_uart_rx_is_frame() recognizes a complete frame. A continuous stream of bytes without a valid PN532 frame header therefore keeps growing the skb until skb_put_u8() hits the tail limit. Drop the accumulated partial frame once the fixed receive buffer is full so malformed UART traffic

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:62cf660a24c86abafc78dfb2319f969686510fda98475665a40aca789b262f36

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/nfc/pn533/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8bedf1dd5640ac8997bff00bbefe241b438df397","status":"affected","version":"c656aa4c27b17a8c70da223ed5ab42145800d6b5","versionType":"git"},{"lessThan":"23e925183db26cd322597679669ad29d70ed2ada","status":"affected","version":"c656aa4c27b17a8c70da223ed5ab42145800d6b5","versionType":"git"},{"lessThan":"3adca9be14bf36b927193f05f5aea35a1a90e913","status":"affected","version":"c656aa4c27b17a8c70da2…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/nfc/pn533/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessTh…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/23e925183db26cd322597679669ad29d70ed2ada"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/2c1fadd221b21d8038acfe6a0f56291881d5ff76"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/30fe3f5f6494f827d812ff179f295a8e532709d6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/3adca9be14bf36b927193f05f5aea35a1a90e913"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/8bedf1dd5640ac8997bff00bbefe241b438df397"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/ad2f60de5045bfb5d20ea468a97c8760c6a3a4f8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/cf2ff10183204349edfd6b972e189375fc5f1fb0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/f48ab6ee654ecc350434e4566bc785773f412b7e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8bc1995ed7ce57904542f79ce171b184651defd8eb53e091a6fb41495466a4ad · sha256:7d9ccc7dacd92a6b… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer