CVE-2026-98480

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98480", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.352Z", "datePublished": "2026-10-18T15:15:54.528Z", "dateUpdated": "2026-10-19T09:20:17.774Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:20:17.774Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: trf7970a: power down on startup RX gain failure\n\ntrf7970a_startup() powers up the device before applying the optional RX\ngain reduction. If the register read or write fails, it returns without\nundoing that power-up. Probe's unwind only drops the separate regulator\nreferences acquired by probe, leaving the additional VIN enable from\nstartup unbalanced. The system resume caller also has no power-down on\nthis error.\n\nCall trf7970a_power_down() before returning the RX gain error to deassert\nthe enable GPIOs, release the startup VIN reference and restore the\npowered-off state. Runtime PM has not been enabled yet, so the full\nshutdown helper is not appropriate here. Preserve the original SPI error.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/nfc/trf7970a.c"], "versions": [{"version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "lessThan": "cc444e4ad43461374dd128573eccb8979d2adb4c", "status": "affected", "versionType": "git"}, {"version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "lessThan": "6ef70d790425e76b42c69e416ee78c62bdc37d00", "status": "affected", "versionType": "git"}, {"version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "lessThan": "d2acbde7e67df44efa8f0963462d1192e7694ffc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/nfc/trf7970a.c"], "versions": [{"version": "6.17", "status": "affected"}, {"version": "0", "lessThan": "6.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c"}, {"url": "https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00"}, {"url": "https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc"}], "title": "nfc: trf7970a: power down on startup RX gain failure", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/nfc/trf7970a.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "cc444e4ad43461374dd128573eccb8979d2adb4c", "status": "affected", "version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "versionType": "git"}, {"lessThan": "6ef70d790425e76b42c69e416ee78c62bdc37d00", "status": "affected", "version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "versionType": "git"}, {"lessThan": "d2acbde7e67df44efa8f0963462d1192e7694ffc", "status": "affected", "version": "5d69351820eab6be1d298af21aedd18be5e5a11a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/nfc/trf7970a.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"lessThan": "6.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: trf7970a: power down on startup RX gain failure\n\ntrf7970a_startup() powers up the device before applying the optional RX\ngain reduction. If the register read or write fails, it returns without\nundoing that power-up. Probe's unwind only drops the separate regulator\nreferences acquired by probe, leaving the additional VIN enable from\nstartup unbalanced. The system resume caller also has no power-down on\nthis error.\n\nCall trf7970a_power_down() before returning the RX gain error to deassert\nthe enable GPIOs, release the startup VIN reference and restore the\npowered-off state. Runtime PM has not been enabled yet, so the full\nshutdown helper is not appropriate here. Preserve the original SPI error.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code."}], "id": "CVE-2026-98480", "lastModified": "2026-10-19T10:18:59.160", "metrics": {}, "published": "2026-10-18T16:16:58.593", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: nfc: trf7970a: power down on startup RX gain failure", "id": "2554839", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554839"}, "csaw": false, "cvss3": {"cvss3_base_score": "1.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnfc: trf7970a: power down on startup RX gain failure\ntrf7970a_startup() powers up the device before applying the optional RX\ngain reduction. If the register read or write fails, it returns without\nundoing that power-up. Probe's unwind only drops the separate regulator\nreferences acquired by probe, leaving the additional VIN enable from\nstartup unbalanced. The system resume caller also has no power-down on\nthis error.\nCall trf7970a_power_down() before returning the RX gain error to deassert\nthe enable GPIOs, release the startup VIN reference and restore the\npowered-off state. Runtime PM has not been enabled yet, so the full\nshutdown helper is not appropriate here. Preserve the original SPI error.\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code.", "A flaw was found in the Linux kernel's Near Field Communication (NFC) TRF7970A driver. This vulnerability can lead to a denial of service (DoS) or improper hardware state due to unreleased power resources. If a communication error occurs while configuring receiver gain during device startup or system resume, the driver exits without powering off the hardware. Consequently, power regulators and control lines remain enabled, resulting in a persistent resource leak."], "name": "CVE-2026-98480", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98480\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98480\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98480.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5d69351820eab6be1d298af21aedd18be5e5a11a,cc444e4ad43461374dd128573eccb8979d2adb4c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5d69351820eab6be1d298af21aedd18be5e5a11a,6ef70d790425e76b42c69e416ee78c62bdc37d00)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5d69351820eab6be1d298af21aedd18be5e5a11a,d2acbde7e67df44efa8f0963462d1192e7694ffc)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "calver", "value": "6.17"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.17)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T23:45:07.050759+00:00", "updated": "2026-10-23T07:15:17.229682+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}