一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-98577 – In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SA

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()

nfc_llcp_wks_sap() compares only service_name_len bytes, so a short
service_name like “u” matches longer WKS strings like “urn:nfc:sn:snep”.
Fix by requiring exact length match before strncmp().