Buffer Overflow Vulnerability in PN532 Chip in Linux Kernel

CVE-2026-43032

What is CVE-2026-43032?

A buffer overflow vulnerability exists in the PN532 NFC interface within the Linux kernel. The pn532_receive_buf() function fails to properly manage the UART receive buffer, appending incoming bytes to dev->recv_skb without sufficient validation. This issue arises when malformed UART traffic continues to transmit data, causing the buffer size to exceed defined limits. To address this, the system now drops any accumulated partial frames once the receive buffer reaches capacity, effectively preventing the exploitation of this weakness through continuous streams of invalid data.

References