Buffer Management Issue in Linux Kernel NFC Module

CVE-2026-43098

What is CVE-2026-43098?

A vulnerability exists in the NFC module of the Linux kernel where bytes are consumed before the allocation of a fresh receive buffer. This flawed handling can disrupt the receive buffer accounting, potentially leading to null dereference errors in subsequent operations. To mitigate this, the receive skb should be allocated before consuming any bytes, ensuring that if an allocation fails, the system correctly returns the number of bytes already received without compromising stability.

References