st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26490.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"last_affected": "5.16.12"
}
],
"source": "DESCRIPTION"
}
]
}
]
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26490.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "206074139490317169037598839359600701356",
"length": 1087
},
"id": "CVE-2022-26490-4e69ae63",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221",
"target": {
"file": "drivers/nfc/st21nfca/se.c",
"function": "st21nfca_connectivity_event_received"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"61329398751519155223692376738273642989",
"263119267062844266410675651437115209135",
"337852708713576238790965020596909318804",
"263553818029615491534054332348517002140",
"41016005744833858378279297108530080237",
"52231473639139312022114101015473353189",
"119395955127400766074646355653511084524",
"20097691079752754103029300330130181377"
],
"threshold": 0.9
},
"id": "CVE-2022-26490-59f4cbdb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/4fbcc1a4cb20fe26ad0225679c536c80f1648221",
"target": {
"file": "drivers/nfc/st21nfca/se.c"
}
}
]
"2026-10-16T08:53:56Z"