Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43098

In the Linux kernel, the following vulnerability has been resolved: nfc: s3fwrn5: allocate rx skb before consuming bytes s3fwrn82_uart_read() reports the number of accepted bytes to the serdev core. The current code consumes bytes into recv_skb and may already deliver a complete frame before allocating a fresh receive buffer. If that alloc_skb() fails, the callback returns 0 even though it has already consumed bytes, and it leaves recv_skb as NULL for the next receive callback. That breaks th
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5b8c646d136e90ff1814246a3882a255252cc1d78f0edd98bcaac267899eb723
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/nfc/s3fwrn5/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"20a57de2e79b797ed75382659d52bf4c7d9cb446","status":"affected","version":"3f52c2cb7e3ada37513dabb69a22cf917dba754f","versionType":"git"},{"lessThan":"e4ab0fd1c91882f2a7846b1817781c8741f7f315","status":"affected","version":"3f52c2cb7e3ada37513dabb69a22cf917dba754f","versionType":"git"},{"lessThan":"d8c2aa3c4a1ec530a485e46a1c4f1a118bb00156","status":"affected","version":"3f52c2cb7e3ada37513…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/nfc/s3fwrn5/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"less…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/nfc/s3fwrn5/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"20a57de2e79b797ed75382659d52bf4c7d9cb446","status":"affected","version":"3f52c2cb7e3ada37513dabb69a22cf917dba754f","versionType":"git"},{"lessThan":"e4ab0fd1c91882f2a7846b1817781c8741f7f315","status":"affected","version":"3f52c2cb7e3ada37513dabb69a22cf917dba754f","versionType":"git"},{"lessThan":"d8c2aa3c4a1ec530a485e46a1c4f1a118bb00156","status":"affected","version":"3f52c2cb7e3ada37513…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/nfc/s3fwrn5/uart.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"less…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/09822d3d6f68a0cdc4626e0c507324a4927f55a9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/20a57de2e79b797ed75382659d52bf4c7d9cb446"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5c14a19d5b1645cce1cb1252833d70b23635b632"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6d931680a9851481c3243689488eafed08eeff71"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7c31f7a599cf00fad3c204092a91a924126c67e4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d8c2aa3c4a1ec530a485e46a1c4f1a118bb00156"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e4ab0fd1c91882f2a7846b1817781c8741f7f315"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c276a4c08ef033eb34eb3aee51f6ed31e5222d4f0103dafb6dcb1c62804b2e99 · sha256:7f1b99054aca1e27… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer