VDB
CVE-2026-43032
CVE-2026-43032
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: NFC: pn533: bound the UART receive buffer pn532_receive_buf() appends every incoming byte to dev->recv_skb and only resets the buffer after pn532_uart_rx_is_frame() recognizes a complete frame. A continuous stream of bytes without a valid PN532 frame header therefore keeps growing the skb until skb_put_u8() hits the tail limit. Drop the accumulated partial frame once the fixed receive buffer is full so malformed UART traffic cannot grow the skb past PN532_UART_SKB_BUFF_LEN.
EPSS 0.02% · 3.4th percentile
Risk Scores
EPSS Score
0.02%
3.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 5.10.253, 0, 6.6.134 |
| linux | linux_kernel | 5.5, 5.5, 5.5 |
Timeline
- May 1, 2026 CVE Published
- May 8, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
- May 27, 2026 EPSS Score
References
- https://git.kernel.org/stable/c/8bedf1dd5640ac8997bff00bbefe241b438df397 url
- https://git.kernel.org/stable/c/23e925183db26cd322597679669ad29d70ed2ada url
- https://git.kernel.org/stable/c/3adca9be14bf36b927193f05f5aea35a1a90e913 url
- https://git.kernel.org/stable/c/2c1fadd221b21d8038acfe6a0f56291881d5ff76 url
- https://git.kernel.org/stable/c/f48ab6ee654ecc350434e4566bc785773f412b7e url
- https://git.kernel.org/stable/c/ad2f60de5045bfb5d20ea468a97c8760c6a3a4f8 url
- https://git.kernel.org/stable/c/cf2ff10183204349edfd6b972e189375fc5f1fb0 url
- https://git.kernel.org/stable/c/30fe3f5f6494f827d812ff179f295a8e532709d6 url
- https://lists.debian.org/debian-lts-announce/2026/05/msg00004.html advisory
- https://lists.debian.org/debian-lts-announce/2026/05/msg00005.html advisory
- https://lists.debian.org/debian-security-announce/2026/msg00154.html advisory
- https://lists.debian.org/debian-security-announce/2026/msg00148.html advisory
- https://lists.debian.org/debian-lts-announce/2026/05/msg00051.html advisory
- https://lists.debian.org/debian-lts-announce/2026/05/msg00052.html advisory