{"id":"CVE-2026-98579","kind":"vulnerability","aliases":["CVE-2026-98579"],"related":[],"title":"Linux kernel NFC LLCP: memory leak on SDREQ error paths","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure\n\nnfc_genl_llc_sdreq() builds a list of TLV nodes while walking nested\nnetlink attrs, but 3 error paths (nested-attr parse failure, TLV alloc\nENOMEM, nfc_llcp_send_snl_sdreq() failure) all skip freeing what was\nalready queued.\n\nRoute them through a new free_list label, mirroring the SDRES path in\nthe same file which already does this. Harmless on the success path\ntoo -- send_snl_sdreq() drains the list as it moves nodes, so it's\nalready empty by the time free_list runs.","summary":"In the Linux kernel's NFC LLCP code, three error paths in the service-discovery request handler skip freeing already-queued TLV nodes, leaking kernel memory. The sources describe a leak, not code execution or data exposure.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","nfc"],"not_affected_if":["nfc-disabled"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:10+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:23:04+00:00","updated_at":"2026-10-25T05:23:04+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:23:04Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel NFC LLCP: memory leak on SDREQ error paths","impact":"low","summary":"In the Linux kernel's NFC LLCP code, three error paths in the service-discovery request handler skip freeing already-queued TLV nodes, leaking kernel memory. The sources describe a leak, not code execution or data exposure.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","nfc"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Kernel memory leaks; repeated triggering could exhaust memory","analyst_note":"Confirm affected kernel version ranges and the fixing commit from the NVD entry or the kernel.org stable advisory.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["nfc-disabled"],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000524,"input_tokens":3458,"output_tokens":357,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98579':13A,16A '3':97C 'alloc':106C 'alreadi':43B,119C,138C,160C 'already-queu':42B 'attr':95C,102C 'build':85C 'code':29B,56B 'cve':11A,14A 'data':59B 'describ':52B 'discoveri':37B 'drain':150C 'empti':161C 'enomem':107C 'error':9A,31B,98C 'execut':57B 'exposur':60B 'failur':80C,104C,113C 'file':136C 'fix':73C 'follow':66C 'free':41B,116C,126C,165C 'genl':82C 'handler':39B 'harmless':141C 'infrastructur':17B 'kernel':2A,20B,25B,48B,64C 'label':128C 'leak':6A,47B,54B,77C 'linux':1A,19B,24B,63C 'linux-kernel':18B 'list':76C,87C,127C,152C,166C 'llc':83C 'llcp':4A,28B,72C,109C 'memori':5A,49B 'mirror':129C 'move':155C 'nest':93C,101C 'nested-attr':100C 'netlink':94C 'new':125C 'nfc':3A,21B,27B,71C,81C,108C 'node':46B,90C,156C 'pars':103C 'parse/alloc/send':79C 'path':10A,32B,99C,132C,145C 'queu':44B,120C 'request':38B 'resolv':70C 'rout':121C 'run':167C 'sdreq':8A,74C,84C,112C,149C 'sdres':131C 'send':110C,147C 'servic':36B 'service-discoveri':35B 'skip':40B,115C 'snl':111C,148C 'sourc':51B 'success':144C 'three':30B 'time':164C 'tlv':45B,75C,89C,105C 'vulner':67C 'walk':92C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98579","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98579","severity":null,"published_at":"2026-10-18T16:17:10+00:00","modified_at":"2026-10-19T10:19:18+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}