[GIT PULL] NFC for v7.1-rc5

From: David Heidelberg

Date: Tue May 26 2026 - 08:31:14 EST


The following changes since commit 7fd2df204f342fc17d1a0bfcd474b24232fb0f32:

Linux 7.1-rc2 (2026-05-03 14:21:25 -0700)

are available in the Git repository at:

https://codeberg.org/linux-nfc/linux.git tags/nfc-7.1-rc6

for you to fetch changes up to f23bf992d65a42007c517b060ca35cebdea3525a:

nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (2026-05-18 18:30:36 +0200)

----------------------------------------------------------------
nfc pull request for net:

Code improvements
- llcp: Fix use-after-free in llcp_sock_release()
- llcp: Fix use-after-free race in nfc_llcp_recv_cc()
- hci: fix out-of-bounds read in HCP header parsing
Regression fixes:
- nxp-nci: i2c: use rising-edge IRQ on ACPI systems

Signed-off-by: David Heidelberg <david@xxxxxxx>

----------------------------------------------------------------
Ashutosh Desai (1):
nfc: hci: fix out-of-bounds read in HCP header parsing

Carl Lee (1):
nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems

Lee Jones (2):
nfc: llcp: Fix use-after-free in llcp_sock_release()
nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()

drivers/nfc/nxp-nci/i2c.c | 21 ++++++++++++++++++++-
net/nfc/hci/core.c | 10 ++++++++++
net/nfc/llcp_core.c | 11 +++++++++++
net/nfc/llcp_sock.c | 2 ++
net/nfc/nci/hci.c | 10 ++++++++++
5 files changed, 53 insertions(+), 1 deletion(-)