CVE-2022-26490

Updated: 2026-02-08 00:54:57.478292

Description:

st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 4.6
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Not Vulnerable 2024-01-20 03:00:29
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-05-03 09:37:52
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2023-11-02 14:11:58
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2022-05-03 09:37:52
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2022-05-03 09:37:52
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-05-03 09:37:52
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-05-03 09:37:52
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Released CLSA-2022:1664906081 2022-10-04 14:02:47
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Released CLSA-2022:1649869212 2022-05-03 09:37:52
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Already Fixed 2023-06-02 09:10:27