---
id: CVE-2026-98480
title: 'nfc: trf7970a: power down on startup RX gain failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nfc: trf7970a: power down on startup RX gain failure

  trf7970a_startup() powers up the device before applying the optional RX
  gain reduction. If the register read or wr…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    cc444e4ad43461374dd128573eccb8979d2adb4c
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    6ef70d790425e76b42c69e416ee78c62bdc37d00
  - >-
    Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a <
    d2acbde7e67df44efa8f0963462d1192e7694ffc
  - Linux 6.17
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:15:54.528Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98480'
references:
  - url: 'https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c'
  - url: 'https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00'
  - url: 'https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.297Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

nfc: trf7970a: power down on startup RX gain failure

trf7970a_startup() powers up the device before applying the optional RX
gain reduction. If the register read or write fails, it returns without
undoing that power-up. Probe's unwind only drops the separate regulator
references acquired by probe, leaving the additional VIN enable from
startup unbalanced. The system resume caller also has no power-down on
this error.

Call trf7970a_power_down() before returning the RX gain error to deassert
the enable GPIOs, release the startup VIN reference and restore the
powered-off state. Runtime PM has not been enabled yet, so the full
shutdown helper is not appropriate here. Preserve the original SPI error.

This issue was identified during our ongoing static-analysis research while
reviewing kernel code.

## Affected

- `Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < cc444e4ad43461374dd128573eccb8979d2adb4c`
- `Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < 6ef70d790425e76b42c69e416ee78c62bdc37d00`
- `Linux >= 5d69351820eab6be1d298af21aedd18be5e5a11a < d2acbde7e67df44efa8f0963462d1192e7694ffc`
- `Linux 6.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.