CVE record · CVE-2026-98482

nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 3afdbebfee2ef7e9510880868cfb482cbffe6836 git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 9b4086eb67a9a3b1ce69fef1b6793827363703ce git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 51b6d73373589abb9de4d84767b0db1bc8d395d9 git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 066205553a0106565bcede934f5721c25ebd6e4e git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 18f60ee882403d5b48097f5f6ae45f794e4cc643 git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 810f204ef8f61f0c930cf6b3280050b3ee6a8ae7 git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 744e61bd06188d8bb068c26a461c252f242b05c9 git
  • affected d646960f7986fefb460a2b062d5ccc8ccfeacc3a to before 273f9d667cde649f8de9d72b1303cc2f4b658c50 git
Other versions: unaffected
Linux Linux
  • affected 3.3
  • unaffected before 3.3 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98482
CNA
Linux
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 11th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.